3 ms·
It's interesting no one brought up DNSSEC[1]. Has anything happened there since 2010? 1. http://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions ht
by Procrastes 13y ago
It's interesting no one brought up DNSSEC[1]. Has anything happened there since 2010?
1. http://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions http://en.wikipedia.org/wiki/Domain_Name_System_Security_Ext...
- helfire 13y agoI was going to mention it, but I haven't found anyone using it or a usable implementation.
- dingaling 13y agoDNSSEC is great in theory, but after three years I still haven't deployed a live instance. It is cumbersome to implement and maintain, requiring co-operation of registrars and frequent key regeneration. It is also very, very chatty and imposes a considerable processing burden on the first-hop DNS resolver. We need a signed DNS solution that isn't DNSSEC.