3 ms·
Curious - does DNSSEC add much to the amount of trust one can assign to DKIM verification? Or are there better solutions (both for trusted DNS and DKIM-alike)?
by jrabone 14y ago
Curious - does DNSSEC add much to the amount of trust one can assign to DKIM verification? Or are there better solutions (both for trusted DNS and DKIM-alike)?
- tptacek 14y agoThe limitations of DKIM are bigger than the fact that it relies on DNS. The bigger challenge is that domain names are not a particularly valuable trust boundary. Applications on the Internet are full of bugs that allow attackers to source messages from other domains. DNSSEC is a boondoggle, and so far as I know no popular application on the entire Internet relies on it for security. But we don't need to hash out DNSSEC vs. DNS to see why a cracked DKIM key isn't a major Internet security hole.