Re: [dns-wg] What about the last mile, was: getting DNSSEC deployed

----- Original Message ----- From: "Max Tulyev" <president@ukraine.su>

Lutz Donnerhacke wrote:

...

...

I find those last two statements highly unlikely, but for argument sake, multiply this by cost(crypto(lastmile))*count(users).

I do not see the need for crypto on the last mile.

And what to do with spoofed answers?

256bit nonce/id field instead of 16.