[afnog] Can DNSCurve be immediate temporal solution?

[MANGA Willy Ted]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,
Le 07/11/2013 12:46, McTim a écrit :
> Hi Seun,
> 
> On Thu, Nov 7, 2013 at 3:55 AM, Seun Ojedeji
> <seun.ojedeji at gmail.com> wrote:
>> Found some interesting write-up about DNSCurve and i was
>> wondering whether it could at least be implemented by most
>> authoritative DNS providers as an immediate but "temporary"
>> solution while the implementation of the actual DNSSEC goes side
>> by side.
> 
> 
> DNSCurve and DNSSEC do different things, so DNSCurve isn't a 
> "temporary solution" to the same security issues as DNSSEC.

To emphasize, i quote this sentence found on wikipedia [1]

« An analogy is that while DNSSEC is like signing a webpage with PGP,
CurveCP and DNSCurve are like encrypting and authenticating the
channel using SSL. Just as PGP-signed webpages can be sent over an
encrypted channel using SSL, DNSSEC data can be protected using DNSCurve.»


1. http://en.wikipedia.org/wiki/DNSCurve

- -- 
Willy Manga
freenode: ongolaBoy
Ubuntu Cameroonian Loco Team
https://launchpad.net/~manga-willy
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=SJsC
-----END PGP SIGNATURE-----