Re: draft-ietf-dnsext-forgery-resilience-01.txt

[Paul Vixie <paul@vix.com>]

> >  "ID's SHOULD be assigned in a manner that the ability of a third party
> >   with access wire data to guess ID's on subsequent queries is minimised;
> >   this could, for instance, be achieved by introducing a pseudo-random
> >   component into the mechanism used to select the ID".
> 
> I like this version.  It specifys narrowly the condition one is trying
> to avoid, and gives a clue about why one wants to avoid it.  It
> provides an example of how to avoid it, but does not prescribe one.

i don't like this version, it overspecifies.  i like bert's version.

--
to unsubscribe send a message to namedroppers-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/namedroppers/>