Metadata Distribution Subcommittee of TAC

["Michael R. Gettes" <>]

Really? Do i understand this to mean there is not a desire to move away from the /etc/hosts model?  Seriously?

/mrg


-------- Original message --------
From: Tom Scavo <>
Date: 08/15/2013 20:04 (GMT-05:00)
To:
Subject: [md-distro] avoiding dynamic metadata queries

Some lingering thoughts after today's call...

I'd prefer to avoid dynamic metadata queries if at all possible. I
haven't yet heard a strong argument in favor of queries (thank god). I
think there is much we can do without venturing down that path.

OTOH, I'm completely in favor of standardizing MDX, but we need that
for addressing purposes, not as a query language.

I'm strongly in favor of moving the signing key online (in a trusted
HSM) and automating the signing process. That's probably the single
most important thing we can do.

Tom