[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [IPSECKEY] new draft revision (00b)



> Last, the nice thing about just using DNS names as opposed to any kind
> of immediate addresses is that doing so decouples the IPSECKEY RR from
> having to know how IP address are represented (A RR, AAAA RR,
> foobar-du-jour RR, doesn't matter, it's just an address).

	the distinction for using the "immediate" address as found in
the reverse map and using the DNS name as found in the forward map presumes
that the folks maintaining these maps will populate them properly. 

	how often, when you are mobil, does your forward lable match the
reverse?   Operationally, this might delay IPSECKEY deployment.

--bill

-
This is the IPSECKEY@sandelman.ca list.
Email to ipseckey-request@sandelman.ca to be removed.