Andrew Brown <twofsonet@graffiti.com> writes:
> >There are far better protocols for handling this sort of thing. See IPSec.
> 
> you can wave ipsec around as much as you want, but i don't have it and
> neither do you.

Of course I have it.

> i'm waiting for it...much the same way way i'm
> waiting for dnssec.  which one do you think will appear first?

You can run DNSSEC today too, although not with the official BIND.

Perry