<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Hi, Boney.<br>
<br>
In a properly configured infrastructure, it is now more difficult
(read: impossible, in most cases) to fake DNS entries under .tz or
other signed-zones.<br>
<br>
It helps calm things with respect to compromised certificate
issuers, as we've seen in the last few years, but is not a
"silver-bullet." It also allows for things like putting SSH
FingerPrints in the DNS (SSHFP records) or validating certificate
signatures from the DNS (TLSA records). This helps to verify
authenticity of the server you're connecting to in a
security-conscious environment.<br>
<br>
As with all security measures, though, it is one link in a large
chain, though.<br>
<br>
Regards,<br>
Strauss<br>
<br>
On 2013/02/09 10:05, Boney Mutabazi wrote:<br>
</div>
<blockquote
cite="mid:CA+TA6OKVkmnc_qdngumLP9jObQK2YbSKBN2Q_V-mFM+Ey9TGQg@mail.gmail.com"
type="cite">
<p>Hi Every one i like what am reading about the "TZ DS
officially signed" Question is to an every day internet user
what does mean and also to TZ ISPs both in terms of speed and
cost per Gig</p>
<p>thanks <br>
Boney</p>
<div class="gmail_quote">On Feb 9, 2013 9:23 AM, "SM" <<a
moz-do-not-send="true" href="mailto:sm@resistor.net">sm@resistor.net</a>>
wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi Simon,<br>
At 13:<a moz-do-not-send="true" href="tel:34%2008-02-2013"
value="+393408022013" target="_blank">34 08-02-2013</a>,
Simon M. Balthazar wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
Yes Alain we do....TZ is officially signed.<br>
</blockquote>
<br>
Congratulations.<br>
<br>
Regards,<br>
-sm <br>
<br>
_______________________________________________<br>
afnog mailing list<br>
<a moz-do-not-send="true"
href="http://afnog.org/mailman/listinfo/afnog"
target="_blank">http://afnog.org/mailman/listinfo/afnog</a><br>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
afnog mailing list
<a class="moz-txt-link-freetext" href="http://afnog.org/mailman/listinfo/afnog">http://afnog.org/mailman/listinfo/afnog</a></pre>
</blockquote>
<br>
</body>
</html>