3 ms·
It can also be quite easy. Buggy complicated Route 53 and self-hosting with a buggy bespoke solution aren't the only options, but they are the only kinds of DNS
by bodgie 3y ago
It can also be quite easy. Buggy complicated Route 53 and self-hosting with a buggy bespoke solution aren't the only options, but they are the only kinds of DNSSEC failures I've seen on the HN front page.
- tptacek 3y agoThe only failures you see on the HN front page are the ones that occur to gigantic companies we've all heard of, with huge networking teams and all the advantages you can ask for in getting DNSSEC working. When random small shops fall off the Internet because they broke DNSSEC, nobody cares; it never makes any front page anywhere.
- bodgie 3y agoI would dispute that the entities that make the HN homepage have all the advantages. Off the top of my head, Slack clearly did not have in-house DNS expertise though they could have if they valued it, and '.nz' seems to be run by at best a skeleton crew.