Re: [ga] Cyberspace Security and the Root(s)

[Allan Liska <allan@allan.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: MD5

Hello Jeff,

Thursday, September 19, 2002, 9:28:23 PM, you wrote:

JW>   They have.  Except that as stated above the huge difference is that
JW> ICANN only wants one set of 13 root servers, and that is from
JW> a security and functionality stand point dangerous and irresponsible...

I know one should never argue with a troll, but it is painfully
obvious that you have no concept of good network security practices,
and I feel the need to point that out.

The situation you describe would mean one of two things:

1. The multiple roots would have to pull their information from the
primary root.  Which is the same situation that exists now...so you
are not providing any benefits.  Remember, each of the current root
nameservers is maintained by a separate organization -- and not
controlled by ICANN.


2. Alternatively, each root would maintain a primary database of their
own, which leads to the possibility that one set of root servers would
have different information than the other set of root servers.  Which
lowers the integrity of the information, and is, by definition,
insecure.

Also, consider that these alternate roots could possibly be maintained
by people like yourself who obviously have no concept of the meaning
of information security, therefore could be a massive security threat.

As an aside, my understanding of the purpose of this list is that it
is a forum for domain name holders to voice their opinions on ICANN
policy etc (I may be wrong about that, if so I apologize).  Since Jeff
Williams does not have a domain name, should he be allowed to
participate on this list?

Just a thought


allan
- --
Allan Liska
allan@allan.org
http://www.allan.org

-----BEGIN PGP SIGNATURE-----
Version: 2.6

iQCVAwUAPYpvtn+n87oa5a9VAQHDowP9G6BlHqwagikNQuaC5cmI46HmMrNqqCXh
XYlNVY2b/gq8cmv5x2kdj2/ZExP00coHLQ4aRFLhIAL9MEQE6I/yW4knUgOV6/m0
iWqzK8dDoagiSfqkE8xh6VJDUCqph+YAKrgdad9hCpVAcLVxtyOnTEtPOPyXnv6h
KuR5kuzX364=
=kGkZ
-----END PGP SIGNATURE-----

--
This message was passed to you via the ga-full@dnso.org list.
Send mail to majordomo@dnso.org to unsubscribe
("unsubscribe ga-full" in the body of the message).
Archives at http://www.dnso.org/archives.html