2 ms·
This thread is about the usefulness of DNSSEC. If you have another agenda than please be explicit about it so that we can have a fruitful conversation. You ask
by xorcist 11y ago
This thread is about the usefulness of DNSSEC. If you have another agenda than please be explicit about it so that we can have a fruitful conversation.
You asked for a domain, any domain, and was prepared to show how Verisign could exercise their control over .com and somehow affect the validation path that DANE provides. At least that's what how I understood you. It's not always clear.
You seem to argue that susceptibility to state level actors is a counterargument to the standard, so I gave one of the few examples I know of who really need to protect against such adversaries.
Apparently my example was somehow a bad one. Take one of the big banks instead then? What could happen to swedbank.se if they signed their delegation with their TLD?
Or why don't you provide an example instead, and show in what way signing it would cede control to the NSA, or to anyone else?
- tptacek 11y agoExamples: * Every .COM * Every .CO.UK * Every .COM.AU * Every .IO * Every .ORG Your response: * The Swedish tax authority's site.
- xorcist 11y agoOf course Verisign controls .com. That was never in question. Again, there are millions of use cases where .com doesn't matter. You alluded to some control that some large entity (which I only assume to be Verisign) exercise over every important domain. I take it that was never the case?