[Dnssec-deployment] DNSSEC aware recursive name servers
drc at virtualized.org
Mon Aug 8 17:09:31 EDT 2011
On Aug 8, 2011, at 6:44 AM, Paul Vixie wrote:
>> I'm not sure what problem this proposal is attempting to solve. Do
>> you believe that having the validating stub issue queries to establish
>> the chain of trust is onerous?
> yes. per-query RTT adds up, and TCP and pipelining isn't a reliable fix.
Perhaps applicable to this discussion: http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_12-2/122_dns.html
More information about the Dnssec-deployment