[getdns-api] Request for DNS updates

Phillip Hallam-Baker hallam
Wed Mar 13 15:09:53 CET 2013


On Wed, Mar 13, 2013 at 7:37 AM, Tony Finch <dot at dotat.at> wrote:
> Phillip Hallam-Baker <hallam at gmail.com> wrote:
>>
>> Developing a client API for those would be non trivial. The credential
>> model supported at present is designed to support the use case in
>> which an administrator of a domain can request updates be made to an
>> authoritative server.
>
> Which credential model? There are several: IP address, TSIG, SIG(0),
> GSS-TSIG, ... And it's fairly straightforward to restrict updates to
> individual names or subtrees within a zone.

As I said, restricting to individual names isn't actually enough.

If I have an outsourced mail service I do not want to give the
outsourcer the ability to put arbitrary records in example.com, they
would be limited to MX records.



-- 
Website: http://hallambaker.com/



More information about the spec mailing list