3 ms·

In late 2019 I scanned Fortune 500 for DNSSEC on their top domain, exactly one entity was using it. At the time azures stance on dnssec support was that https c

In late 2019 I scanned Fortune 500 for DNSSEC on their top domain, exactly one entity was using it. At the time azures stance on dnssec support was that https certs should suffice. I think it’s a dead tech.

b112 5y ago
You haven't lived, until you cannot update the time via ntp, because no dns, because dnssec records aren't valid, because the time is wrong.... This dnssec/ntp dependency loop is absurd, and it is incomprehensible that ntp/dns can break this way.
- ianai 5y ago
  Could you fix that? I've had mixed results trying to resolve such NTP related issues.
  - b112 5y ago
    I think using IPs for NTP servers, or disabling dnssec are your only options. Both show how silly it all is, IMO.
tptacek 5y ago
Quick, easy project! I did it just now (finding a list of F500 domains was the hardest part), and 9% of the Fortune 500 is signed.