High Quality Content by WIKIPEDIA articles! DNSCurve uses high-speed high-security elliptic curve cryptography to add link-layer security on top of standard DNS, in a way that's simple to implement and administer and scales well. Not much is known about the protocol as of 1 September 2008 (2008 -09-01)[update], as it has just been proposed by its author, Daniel J. Bernstein. DNSCurve appears to be much more similar in concept to TSIG (securing communication with name servers) rather than DNSSEC (securing DNS records themselves). There are some significant differences, however. TSIG, frequently needs to switch to the more expensive TCP transport, while DNSCurve is designed to keep the packets smaller. TSIG is also not typically used for all queries, but primarily for updating DNS records. TSIG does just authentication, while DNSCurve does both authentication and encryption. Finally, DNSCurve includes a scalable key distribution scheme, while TSIG is much more limited.

Данное издание не является оригинальным. Книга печатается по технологии принт-он-деманд после получения заказа.