3 ms·
> We've had the X.509 certificate infrastructure for 30+ years, a You could argue that because TLS is both free and ubiquitous, DNSSEC is just added burden giv
by ignoramous 3y ago
> We've had the X.509 certificate infrastructure for 30+ years, a
You could argue that because TLS is both free and ubiquitous, DNSSEC is just added burden given the outages. Personally, I don't see BigTech pouring resources, like they do at HTTP/TLS/WebPKI.
- tptacek 3y agoAdding to this: virtually none of the large tech firms have adopted DNSSEC. It's usually news when one of them does, and that news story usually takes the form of that firm dropping off the Internet for half a day because DNSSEC ate them.