[Dnssec-deployment] DNSSEC aware recursive name servers

David Conrad drc at virtualized.org
Mon Aug 8 17:09:31 EDT 2011


On Aug 8, 2011, at 6:44 AM, Paul Vixie wrote:
>> I'm not sure what problem this proposal is attempting to solve.  Do
>> you believe that having the validating stub issue queries to establish
>> the chain of trust is onerous?
> 
> yes.  per-query RTT adds up, and TCP and pipelining isn't a reliable fix.

Perhaps applicable to this discussion: http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_12-2/122_dns.html

Regards,
-drc



More information about the Dnssec-deployment mailing list