Re: [dns-wg] What about the last mile, was: getting DNSSEC deployed

* Max Tulyev wrote:

Lutz Donnerhacke wrote:

...

I do not see the need for crypto on the last mile.

And what to do with spoofed answers?

Spoofing the ISPs resolver on the last mile is not possible due to ingress filtering.