3 ms·
If Thomas isn't responding I will. DNSSEC is an important idea, but not something a company's security department should be terribly worried about implementing
by Abekkus 8y ago
If Thomas isn't responding I will. DNSSEC is an important idea, but not something a company's security department should be terribly worried about implementing just this minute. TLS will take care of most of what you need in that area.
The most practical concern right now is that DNSSEC isn't even being honored by most clients, so even if you build a solution that you're comfortable with, it will be doing nothing to secure most of your customers' connections. If clients start using DNSSEC more in the future, you'll hear about it.
- pvg 8y agoA big part of his argument is that it's not, in fact, an important idea.
- Abekkus 8y agoCalling DNSSEC "worse than nothing" is the part where he overreaches, doesn't engage with valid counterarguments, and just calls his objectors Linux nerds, or true believers; yet he still gets upvoted by some quiet army.