How secure is rndc?

Joseph S D Yao jsdy at center.osis.gov
Thu Dec 21 20:28:14 UTC 2006


On Thu, Dec 21, 2006 at 09:11:44AM -0600, Len Conrad wrote:
> 
> >What I cannot say for sure is whether RNDC is fully encrypted or just
> >"signed."
> 
> TSIG is signed packets, the packet contents being cleartext.
> 
> TSIG guarantees that
> 
> 1. the packet sent is identical to the packet received.
> 
> 2. the sender and recipient share the same key.
> 
> the intent is not to hide/encrypt the packet contents
> 
> Len


Missing piece:  is 'rndc' using TSIG?


-- 
Joe Yao
-----------------------------------------------------------------------
   This message is not an official statement of OSIS Center policies.



More information about the bind-users mailing list