3 ms·
I don’t think TLS is the most brittle component of the web. That award probably goes to DNS, BGP, or (depending on how you qualify it) us-east-1.
by woodruffw 3y ago
I don’t think TLS is the most brittle component of the web. That award probably goes to DNS, BGP, or (depending on how you qualify it) us-east-1.
- lbotos 3y agoWhats brittle about DNS? Caching? BGP and us-east-1 fair :D
- bawolff 3y agoDNSSec is pretty brittle. I think this is a very different definition of brittle than the original poster meant
- tptacek 3y agoYeah, but almost nobody uses it (it's got low single digits uptake in the US, and has actually decline in some years), so that's not the part of DNS that's making it brittle for deployments.
- talideon 3y agoDescribing DNSSEC as brittle is the height of understatement.
- AdamJacobMuller 3y agoBrittle, painful and with a tiny minority who scream at you for being stupid because you're not using it and complain about these problems.
- woodruffw 3y agoCaching, people misunderstanding (and misusing) TTLs, bespoke service discovery on top of DNS without understanding the aforementioned, bespoke stringly-typed configuration languages in various DNS records, etc.
- sgjohnson 3y agoWhat's brittle about BGP? There hasn't been a wide-scale BGP outage since 2019 when verizon did `import all; export all;`. Facebook doesn't count, as it was limited to their network.
- account42 3y agoA DNS client from the 90s will have no trouble communicating with current DNS servers and BGP only matters to internet backbone routers. Neither of them cause any problems for old devices.