4 ms·
We don't need DNSSEC because we have TLS certificates. And as we all know, no large tech company has ever had trouble with misconfigured or expired TLS certific
by wahern 5y ago
We don't need DNSSEC because we have TLS certificates. And as we all know, no large tech company has ever had trouble with misconfigured or expired TLS certificates.
- tptacek 5y agoWhy not both sets of problems?
- belorn 5y agoThe core issue behind both sets is single point of failure. A misconfigured security system can causes down time. The problem is that security systems tend to be single point of failure by design that fail "safe" by not allowing access. This would be an excellent security research topic. How to design non-single point of failure security that both fail safe and do not cause down time when misconfigured.