3 ms·
> DANE and DNSSEC are horrible bodges that don't actually do anything useful or in a secure way. Adoption is extremely poor, usability is horrible, and the app
by 8organicbits 3y ago
> DANE and DNSSEC are horrible bodges that don't actually do anything useful or in a secure way.
Adoption is extremely poor, usability is horrible, and the approach used is quite dated, but I'm not sure DANE and DNSSEC are insecure. Did you have a reference on the latter?
- igorhvr 3y agohttps://sockpuppet.org/blog/2015/01/15/against-dnssec/ https://sockpuppet.org/blog/2015/01/15/against-dnssec/ is relevant.
- 8organicbits 3y agoThis is quite dated, unfortunately.
- gunapologist99 3y agoHow so? Has DNSSEC appreciably changed since 2015?
- tptacek 3y agoNo. The case that post makes has gotten stronger since 2015, not weaker.