3 ms·
Providing that kind of assurance of integrity is precisely what DNSSEC is designed to do. With the signatures and "chain of trust" a DNSSEC-validating DNS resol
by danyork 15y ago
Providing that kind of assurance of integrity is precisely what DNSSEC is designed to do. With the signatures and "chain of trust" a DNSSEC-validating DNS resolver could determine whether the DNS info has been tampered with and provide that feedback back to an application. Now, how the application might choose to present that info is a different question... and could, in fact, offer creative error messages like the one you wrote.
- danyork 15y agoOn that topic of the user experience, you might also be interested in the post I wrote about that question: http://www.internetsociety.org/deploy360/blog/2012/01/what-is-the-correct-user-experience-for-dnssec-in-a-web-browser/ http://www.internetsociety.org/deploy360/blog/2012/01/what-i... which did get some discussion here on HN: http://news.ycombinator.com/item?id=3435143 http://news.ycombinator.com/item?id=3435143