[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ike and secure DNS

To: Hugo Krawczyk <hugo@ee.technion.ac.il>
Subject: Re: ike and secure DNS
From: Henry Spencer <henry@spsystems.net>
Date: Wed, 11 Oct 2000 14:06:40 -0400 (EDT)
cc: ipsec <ipsec@lists.tislabs.com>
In-Reply-To: <Pine.GSO.4.21.0010101415260.12472-100000@ee.technion.ac.il>
Sender: owner-ipsec@lists.tislabs.com

On Wed, 11 Oct 2000, Hugo Krawczyk wrote:
> I'd like to gather information on existing projects (commerical or
> academic) working towards the integration of DNSSEC infrastructure and
> IKE/ipsec. I know FreeSWAN has such integration plans? Any progress in
> that front?

We're fetching keys from DNS operationally, and starting to fetch our
gateway-discovery information as well.  We haven't yet done much about
integration specifically with DNSSEC, partly because we are waiting for
BIND9's new resolver to be *documented* so we can use it.  We see the
bulk of the DNSSEC side of things as being the resolver's job rather
than ours.

                                                          Henry Spencer
                                                       henry@spsystems.net

Follow-Ups:

Re: ike and secure DNS

From: Dan Harkins <dharkins@cips.nokia.com>

References:

ike and secure DNS

From: Hugo Krawczyk <hugo@ee.technion.ac.il>

Prev by Date: Re: Reliable delete notifies
Next by Date: Re: ike and secure DNS
Prev by thread: Re: ike and secure DNS
Next by thread: Re: ike and secure DNS
Index(es):
- Main
- Thread