secure dhcp

[Carl Karsten]

David W. Hankins wrote:
> On Wed, Apr 26, 2006 at 12:29:46AM -0500, Carl Karsten wrote:
>> I did just find this: http://wiki.etherboot.org/pmwiki.php/Main/SafeBootMode
> 
> That describes a good method I think, but we ISC folk are wary of the
> idea of distributing software with a key built-in.  Particularly if it's
> going to be burned onto ROMs and possesses no reliable key revocation
> method.

The pxe code does not have to live in a rom - any boot device (floppy, usb, 
HD..) is fair game, so the key problem does have a chance.

Carl K