[Operators] [Fwd: Re: Secure Communications Week]

Johansson Olle E oej at edvina.net
Sat Aug 16 01:25:33 CDT 2008


>
>
>> I suppose one question is: how do you check fingerprints?
>
> Well, if you're doing DNSsec as Olle suggested, you just put the whole
> public key in the DNS using a DNSKEY record.  You then authenticate
> the record using standard DNSsec protocols.  (This currently works in
> .se and .br, and is supposed to be rolled out next yet for .org.
> Having IANA actually sign the root is still some ways off.)

Getting this support into implementations also takes time, so this
might go hand-in-hand.

/Olle
(proud .se domain owner :-) )
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2207 bytes
Desc: not available
Url : http://mail.jabber.org/pipermail/operators/attachments/20080816/ea1eaa97/attachment.bin 


More information about the Operators mailing list