[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Use of DNS to distribute keys
> Actually, the context was in setting up end-end (rather than store-and-
> forward) data protection keys,
> Now, how about simply defining a (publicly readable, usually) MIB for this
> so that keys could be accessed (and even remotely managed) without inventing
> new protocol, using SNMP?
Why we need encryption here for the end-end communication? Because the
IP layer is unreliable. Some malicious intermediate host may pretend
to be the end host. The problem with MIB is that the public key obtained
through MIB through malicious intermediate hosts is just as unreliable
as the IP layer.
What we need for the globaly authenticated communication is an authenticated
tree structure of servers to provide reliable public keys, which could be
a variation of DNS.
Masataka Ohta
References: