4 ms·
Use cloudflare. Unlike Amazon, their DNS is free and it is supposed to be among the fastest. Then again, DNSSEC is useless against a BGP hijack where the names
by ryao 9y ago
Use cloudflare. Unlike Amazon, their DNS is free and it is supposed to be among the fastest.
Then again, DNSSEC is useless against a BGP hijack where the nameservers for the domain are replaced with malicious ones.
- Kalium 9y agoBelieve me, I'd very much like that. I'm better aware than most of their technical capabilities and speed. When I say "a lot of people running services", I don't mean me. I mean a lot of people I know and associate with. A lot of them have grown to rely on close integration between DNS and all their other infrastructure services. That CF covers them technically isn't helpful - they expected it all under one roof and they need to not spend cycles on thinking about something marginal to them like DNS. One of the biggest selling-points of AWS is that it puts all your services in one spot. It limits orchestration work and makes life simpler. Asking people to leave that for security improvements may be necessary, but it's not a small ask.