3 ms·
That would force companies to either own all of the front-end server farms or store their keys on machines in untrustworthy environments.
by indolering 11y ago
That would force companies to either own all of the front-end server farms or store their keys on machines in untrustworthy environments.
- tptacek 11y agoYes: a choice between two very unattractive options. Isn't DNSSEC great?
- indolering 11y agoUh? You can run everything in offline mode, unless you really care about trivial zone enumeration.
- yuhong 11y agoI am not talking about the current DNSSEC, of course.
- Habbie 11y agoI.E. the way SSL/TLS is run today.