3 ms·
So basically, DNSSEC is like signing an email with a PGP key, and the others are like encrypting an email with PGP ?
by calgoo 8y ago
So basically, DNSSEC is like signing an email with a PGP key, and the others are like encrypting an email with PGP ?
- bluejekyll 8y agoSimilar, yes, but it's not a perfect analogy. In the DNSSEC case, yes, that's akin to the same thing. In the other, PGP is both encrypting and authenticating the data, then sending that over untrusted email servers. DoH, DoT, et al, are encrypting the channel, and authenticating the endpoints, but not authenticating the data.