From owner-freebsd-security  Thu Apr  8  3: 1: 1 1999
Delivered-To: freebsd-security@freebsd.org
Received: from verdi.nethelp.no (verdi.nethelp.no [158.36.41.162])
	by hub.freebsd.org (Postfix) with SMTP id 7F2EB14D66
	for <freebsd-security@freebsd.org>; Thu,  8 Apr 1999 03:00:57 -0700 (PDT)
	(envelope-from sthaug@nethelp.no)
Received: (qmail 84018 invoked by uid 1001); 8 Apr 1999 09:58:56 +0000 (GMT)
To: netadmin@fastnet.co.uk
Cc: freebsd-security@freebsd.org
Subject: Re: ssh and scp
From: sthaug@nethelp.no
In-Reply-To: Your message of "Thu, 8 Apr 1999 10:51:45 +0100"
References: <19990408105145.J2213@bofh.fastnet.co.uk>
X-Mailer: Mew version 1.05+ on Emacs 19.34.2
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Date: Thu, 08 Apr 1999 11:58:56 +0200
Message-ID: <84016.923565536@verdi.nethelp.no>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> > Maybe I'm missing something, but isn't that what zone transfers
> > are for?
> 
> Yeh but he's probably looking for something that's encrypted -
> you could try the new DNSSEC beta's (www.toad.com/~dnssec , but 
> AFAIK they just sign the zone files and don't actually encrypt 
> them over the link.

Note that:

1. BIND 8.2 already supports (part of) DNSSEC.
2. But there are known bugs in the 8.2 implementation which can give
you crashes if it's used. An unofficial patch is available.

Steinar Haug, Nethelp consulting, sthaug@nethelp.no


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message