3 ms·

> with decentralized DNS, it is possible to replace certificate authorities by using DNSSEC In what sense is DNSSEC decentralized? IMHO signing the root zone

> with decentralized DNS, it is possible to replace certificate authorities by using DNSSEC In what sense is DNSSEC decentralized? IMHO signing the root zone is about the most-centralizing thing that has ever happened to the Internet.

tptacek 6y ago
It is exactly that.
tasuki 6y ago
That's the thing Handshake is trying to address: with the root zone being on the (decentralized) blockchain, each TLD owner has full control over issuing the certificates for that domain using DNSSEC+DANE. The idea was that this would allow us to get rid of both the centralized root zone and CAs.
- saargrin 6y ago
  wouldnt that blockchain grow exponentially ?
  - tasuki 6y ago
    Why exponentially? Seems like linear growth to me.