3 ms·
Thems some mighty tall claims. Cite sources please?
by TehCorwiz 12y ago
Thems some mighty tall claims. Cite sources please?
- tptacek 12y agoExtraordinary claims require extraordinary evidence, so I think perhaps you ought to start by naming some important service that does rely on DNSSEC. How about a bank, or a major email provider?
- opendais 12y agoPagerduty: http://blog.pagerduty.com/2013/12/outage-post-mortem-dec-11-2013/ http://blog.pagerduty.com/2013/12/outage-post-mortem-dec-11-... Swedish banks: http://www.alandsbanken.se/ http://www.alandsbanken.se/ http://www.dnssecandipv6.se/bankdns/ http://www.dnssecandipv6.se/bankdns/ I'm not really backing the DNSSEC horse but I figured I'd point out that they exist and are not super uncommon. Also as the person starting the argument, you should be the one providing evidence.
- tptacek 12y agoYou cite Pagerduty, which managed to glean a significant outage from an attempt to deploy DNSSEC, a service virtually none of their customers can actually use.
- opendais 12y agoYes. I don't have a bias so pointing out the potential availability issue if you make a mistake makes sense. However, you asked for banks and/or major email providers. I figured it was close enough since I knew that one off the top of my head.
- tptacek 12y agoIncidentally: if we want to use words like "bias", let's get mine on the table. DNSSEC is a terrible idea that will harm the Internet without solving any meaningful security problems. I am not open-minded about it. That does, I suppose, make me "biased" against it. :)
- opendais 12y agoI didn't state you had a bias.
- xorcist 12y agoIs that a trick question? When does one rely on dnssec? Here in Sweden most important institutions have deployed it. I thought most of US government institutions were under mandate to deploy soon as well? When deployed, you as an end user are the one who can rely on it.