[getdns-api] Request for DNS updates
hallam at gmail.com
Wed Mar 13 07:09:53 MST 2013
On Wed, Mar 13, 2013 at 7:37 AM, Tony Finch <dot at dotat.at> wrote:
> Phillip Hallam-Baker <hallam at gmail.com> wrote:
>> Developing a client API for those would be non trivial. The credential
>> model supported at present is designed to support the use case in
>> which an administrator of a domain can request updates be made to an
>> authoritative server.
> Which credential model? There are several: IP address, TSIG, SIG(0),
> GSS-TSIG, ... And it's fairly straightforward to restrict updates to
> individual names or subtrees within a zone.
As I said, restricting to individual names isn't actually enough.
If I have an outsourced mail service I do not want to give the
outsourcer the ability to put arbitrary records in example.com, they
would be limited to MX records.
More information about the getdns-api