3 ms·
Except that DNS TLDs are already run by world governments. Maybe you wanted to say that tree-structured DNS with TLDs owned by governments is bad, but this is
by garaetjjte 10y ago
Except that DNS TLDs are already run by world governments.
Maybe you wanted to say that tree-structured DNS with TLDs owned by governments is bad, but this is a problem of DNS, not DNSSEC.
DANE reduces parties able to issue rouge certificate from TLD owner + all CAs to TLD owner only.
- tptacek 10y agoDNS TLDs are run by world governments. But the CA PKI is not. Restricting the ability to issue rogue certificates to world governments is not a win: in fact, it's a regression.