3 ms·

Verisign is just a company located in the USA. Does it then follow that any company located in the USA is 'controlled by the USG'? That seems like a bit of a st

Verisign is just a company located in the USA. Does it then follow that any company located in the USA is 'controlled by the USG'? That seems like a bit of a stretch, to say the least. There is nothing else there. Your reference to history is irrelevant today. Also, I really don't understand what this has to do with DNSSEC? Without DNSSEC anyone can forge responses. With DNSSEC you limit that to the zone administrator.

rocqua 9y ago
> Without DNSSEC anyone can forge responses. With DNSSEC you limit that to the zone administrator. Whilst that is an improvement, it is still bad. Specifically, I'd it is not good enough to build a secure system on. There is an argument to be made that it is nice for defense in depth, but it should not be stand-alone security. There are other practical concerns regarding DNSSEC at the moment with failure handling.
Panino 9y ago
> Verisign is just a company located in the USA. Does it then follow that any company located in the USA is 'controlled by the USG'? Verisign doesn't own .com -- the US government does. Verisign operates .com on contract with the US Chamber of Commerce.