24 Feb
2004
24 Feb
'04
3:30 p.m.
It's a module plug-in into bind and if you prefer to try and do this in a opt-in basis they have a client program that you download and it gets hooked into the users browser.
This is the right way to do it, end user opt in, and browser only.
i'm a little bit worried about the idea of doing this inside BIND, since DNS is supposed to be coherent, and answers are supposed to be based on fact rather than value. but the larger point of this reply is:
Unlaterally forcing it upon everyone and breaking non www based apps is the wrong way to do it.
if you have well founded views on this topic and you have not yet shared them with ICANN's SSAC, please do so. see <http://secsac.icann.org/>.