"Behind firewalls"

["Donald E. Eastlake 3rd" <dee@cybercash.com>]

I'd like to speak out againt the hiding of portions of the DNS tree. If you
have a firewall, you can screen every packet, establish application level
filters, cause mail to be delivered where you want, etc.  Hiding parts of
your name space adds very little to security and is pretty obnxoious.  I
recommend conentrating on other areas of security and encouraging the
development and dissemination of MOSS, IPSEC, etc. 

Donald
=====================================================================
Donald E. Eastlake 3rd     +1 508-287-4877(tel)     dee@cybercash.com
   318 Acton Street        +1 508-371-7148(fax)     dee@world.std.com
Carlisle, MA 01741 USA     +1 703-620-4200(main office, Reston, VA)