3 ms·
Why isn't everyone using DNSSEC?
- brudgers 9y agoA fairly good HN technical discussion of DNSSEC with several comments by tptacek.
- tptacek 9y agohttps://sockpuppet.org/blog/2015/01/15/against-dnssec/ https://sockpuppet.org/blog/2015/01/15/against-dnssec/ The real answer is simple: it provides very little value. TLS was designed to assume that the DNS was insecure, and if you care about security, you need at least TLS.