3 ms·
Maybe the push towards DNSSEC will sweep IPv6 along with it.. we can't afford not to have either of these things, and both require some significant maintenance
by igglepiggle 18y ago
Maybe the push towards DNSSEC will sweep IPv6 along with it.. we can't afford not to have either of these things, and both require some significant maintenance work - why not roll out both at the same time? Maybe DNSSEC should only support IPv6?
- tptacek 18y agoCouple things. First, the "push towards DNSSEC" is largely just a superficial trend story. There are operational problems with DNSSEC that will probably severely retard DNSSEC adoption. I'm not going to pretend DNSSEC isn't more likely to happen after the last few months, but none of the problem with DNSSEC that almost left it DOA before have changed. Second, there's no real relationship between DNSSEC and IPv6. DNSSEC signs arbitrary records, including A.
- igglepiggle 18y agohttp://www.circleid.com/posts/verisign_com_net_domain_dnssec_by_2011/ http://www.circleid.com/posts/verisign_com_net_domain_dnssec...
- tptacek 18y agoAgain, a couple things. First, the CircleID site is a proponent of DNSSEC. Second, this isn't the first time Verisign has publicly committed to DNSSEC. Finally, just because Verisign says it's going to adopt the protocol, doesn't mean the protocol is going to work.