3 ms·
If we’re OK with just throwing references around, in liu of actually making arguments ourselves, here are a couple of them: • <https://blog.technitium.com/2023
by teddyh 3y ago
If we’re OK with just throwing references around, in liu of actually making arguments ourselves, here are a couple of them:
• <https://blog.technitium.com/2023/05/for-dnssec-and-why-dane-is-needed.html https://blog.technitium.com/2023/05/for-dnssec-and-why-dane-...>
• <https://www.redpill-linpro.com/techblog/2019/05/06/sshfp-and-dnssec.html https://www.redpill-linpro.com/techblog/2019/05/06/sshfp-and...>
- tptacek 3y agoThese are randos. I cited Geoff Huston. You know, the chief scientist at APNIC? And he's a DNSSEC proponent.
- teddyh 3y agoI prefer arguing by reason, not making arguments from authority. Please, make your arguments yourself instead of telling us how your dad is the boss of Xbox or whatever.
- tptacek 3y agoNo, I'm pretty comfortable with what this particular authority means to this argument.
- teddyh 3y agoI.e. precisely nothing? Arguments form from two things, reason and experience, both of which can be respected. Mere authoritarian titles, however, should not. Also, you keep not actually making any actual arguments about DNSSEC.
- tptacek 3y agoIf you're comfortable concluding your argument by saying Geoff Huston's take means "precisely nothing", I'm comfortable with you concluding there too.
- teddyh 3y agoYou should not be so comfortable making up opinions and ascribing them to what you consider to be your opponents. I said arguments from mere authority mean nothing. I.e. your arguments, where you refer to other people without making any argument yourself. I'll also note that you dismissed my references as being by "randos", without any further argument or even reading them.
- tptacek 3y agoI've read both of them. You've brought them up before. They are randos.
- teddyh 3y agoIf you’ve read them before, surely you can bring some counter-arguments which are not a simple ad hominem? If you insist on dismissing arguments outright from persons whom you do not consider authoritative, consider Geoff Huston, a person you referred to before: <https://www.potaroo.net/ispcol/2023-02/dnssec.html https://www.potaroo.net/ispcol/2023-02/dnssec.html>.
- tptacek 3y agoThis is an 8000 word case against DNSSEC. It's what I would have cited to you if you had pressed me on Huston. Did you read it carefully?
- teddyh 3y agoI have read it. He presents both the case for and against DNSSEC, and seems to conclude that DNSSEC is necessary for a distributed PKI, and seems to advocate for DANE (which uses DNSSEC) to solve the many problems of the traditional CA system. Now, have you read my reference, and can you argue against it?
- tptacek 3y ago