How secure is rndc?

Marc Haber mh+bind-users at zugschlus.de
Thu Dec 21 15:33:26 UTC 2006


On Thu, Dec 21, 2006 at 09:11:44AM -0600, Len Conrad wrote:
> >What I cannot say for sure is whether RNDC is fully encrypted or just
> >"signed."
> 
> TSIG is signed packets, the packet contents being cleartext.
> 
> TSIG guarantees that
> 
> 1. the packet sent is identical to the packet received.
> 
> 2. the sender and recipient share the same key.
> 
> the intent is not to hide/encrypt the packet contents

So people can see whether I just have reloaded or stopped my server. I
do not have a big problem with that.

Thanks for helping.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835



More information about the bind-users mailing list