How secure is rndc?
Marc Haber
mh+bind-users at zugschlus.de
Thu Dec 21 15:33:26 UTC 2006
On Thu, Dec 21, 2006 at 09:11:44AM -0600, Len Conrad wrote:
> >What I cannot say for sure is whether RNDC is fully encrypted or just
> >"signed."
>
> TSIG is signed packets, the packet contents being cleartext.
>
> TSIG guarantees that
>
> 1. the packet sent is identical to the packet received.
>
> 2. the sender and recipient share the same key.
>
> the intent is not to hide/encrypt the packet contents
So people can see whether I just have reloaded or stopped my server. I
do not have a big problem with that.
Thanks for helping.
Greetings
Marc
--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835
More information about the bind-users
mailing list