you may wish to read the draft. it did not suggest using the dns to configure. and you may also want to look into dnssec. randy