Question about dns_lookup_realm and domain_realm

Jeffrey Altman jaltman at secure-endpoints.com
Fri Jun 27 12:10:22 EDT 2008


Simo Sorce wrote:
>
> Uhmm perhaps we are thinking of two different things, once you control
> DNS you control both direct and reverse address resolution.
>
Hence the reason that reverse DNS lookups are not to be used as per the 
Security Considerations
of RFC 4120.

Jeffrey Altman

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3355 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20080627/bbf65c99/attachment.bin


More information about the Kerberos mailing list