9fans - fans of the OS Plan 9 from Bell Labs
 help / color / mirror / Atom feed
From: hiro <23hiro@googlemail.com>
To: Fans of the OS Plan 9 from Bell Labs <9fans@9fans.net>
Subject: Re: [9fans] Are we ready for DNSSEC ?
Date: Sun, 24 Jan 2010 14:19:33 +0100	[thread overview]
Message-ID: <f4d8fa41001240519n5898a98cv26d100ad779415e1@mail.gmail.com> (raw)
In-Reply-To: <40f353c957e2ac20128c149f8bb178aa@ladd.quanstro.net>

so you need to have a more "secure" dns because you don't trust your ssl?

On Sun, Jan 24, 2010 at 2:18 AM, erik quanstrom <quanstro@quanstro.net> wrote:
>> > doesn't work with the recent renegotiation bug.
>>
>> disable renegotiation.
>>
>> > but i don't
>> > think one can dismiss dns as a non-issue.
>>
>> dns is a non-issue if the rest of ssl is working.
>> dns is irrelevant if it isn't.
>
> the renegotiation bug is a protocol flaw.  i'm
> not so sure i trust ssl enough to decide i don't
> care of dns gets hijacked.
>
> - erik
>
>



  reply	other threads:[~2010-01-24 13:19 UTC|newest]

Thread overview: 24+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2010-01-20 13:26 maht
2010-01-20 13:42 ` erik quanstrom
2010-01-20 15:14   ` Patrick Kelly
2010-01-20 15:33     ` erik quanstrom
2010-01-20 16:39       ` Patrick Kelly
2010-01-20 16:49         ` erik quanstrom
2010-01-20 17:29           ` Patrick Kelly
2010-01-20 17:47         ` Russ Cox
2010-01-20 18:17           ` erik quanstrom
2010-01-20 20:11             ` Russ Cox
2010-01-20 19:13           ` Patrick Kelly
2010-01-23 23:59 ` John Barham
2010-01-24  0:42   ` erik quanstrom
2010-01-24  0:52     ` Russ Cox
2010-01-24  1:01       ` erik quanstrom
2010-01-24  1:11         ` Russ Cox
2010-01-24  1:18           ` erik quanstrom
2010-01-24 13:19             ` hiro [this message]
2010-01-24 14:57               ` erik quanstrom
2010-01-24 21:49                 ` Russ Cox
2010-01-24 22:12                   ` Tim Newsham
2010-01-24 22:20                     ` erik quanstrom
2010-01-24 18:14           ` Tim Newsham
2010-01-25 20:45             ` Wes Kussmaul

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=f4d8fa41001240519n5898a98cv26d100ad779415e1@mail.gmail.com \
    --to=23hiro@googlemail.com \
    --cc=9fans@9fans.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).