2 ms·

If you're stuck with something like AWS and their buggy implementation then you might indeed run into trouble. Luckily, normal DNS servers don't have this issue

If you're stuck with something like AWS and their buggy implementation then you might indeed run into trouble. Luckily, normal DNS servers don't have this issue. Most people and websites don't have ops teams, though. It's mostly a challenge if you manage your own DNS, which most people don't do.

tptacek 6mo ago
The point isn't that you're stuck using Route53, it's that large, hypercapable teams, including the one at Route53, have attempted to deploy and manage DNSSEC and failed, indicating that the challenge is not simply "4 lines in a text file".