Re: draft-ietf-dnsext-forgery-resilience-01.txt

[Andrew Sullivan <andrew@ca.afilias.info>]

On Mon, Nov 12, 2007 at 07:38:15PM +0000, Alex Bligh wrote:

>  "ID's SHOULD be assigned in a manner that the ability of a third party
>   with access wire data to guess ID's on subsequent queries is minimised;
>   this could, for instance, be achieved by introducing a pseudo-random
>   component into the mechanism used to select the ID".

I like this version.  It specifys narrowly the condition one is trying
to avoid, and gives a clue about why one wants to avoid it.  It
provides an example of how to avoid it, but does not prescribe one.

A

-- 
Andrew Sullivan                         204-4141 Yonge Street
Afilias Canada                        Toronto, Ontario Canada
<andrew@ca.afilias.info>                              M2P 2A8
jabber: ajsaf@jabber.org                 +1 416 646 3304 x4110

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>