3 ms·
The root zone has always been publicly available. But isn't it nice that you can cryptographically verify that this is the root-zone with DNSSEC? I'm not sure
by AndyMcConachie 10y ago
The root zone has always been publicly available.
But isn't it nice that you can cryptographically verify that this is the root-zone with DNSSEC? I'm not sure how you're verifying it using PGP, but I think you mean public key encryption, which is what DNSSEC is using.
- tptacek 10y agoDNSSEC does not in fact use public-key encryption; it uses public-key signatures, with an outmoded RSA construction that would have been rejected for new protocols 5 years ago. In fact: TLS 1.3 just jettisoned RSA.