3 ms·
Which is really unfortunate, since it's pretty easy to do.
by indolering 7mo ago
Which is really unfortunate, since it's pretty easy to do.
- tptacek 7mo agoI agree that it's relatively easy for CAs to validate DNSSEC. I think the fact that they weren't technically required to, despite the sole remaining use case for DNSSEC being to protect against misissuance, is a pretty strong indicator of how cooked DNSSEC is.