3 ms·
Isn't there a 'Secure Golden Key' at the base of DNSSEC? I guess the damage would be somewhat less if that key was exposed, but still.
by roywiggins 12y ago
Isn't there a 'Secure Golden Key' at the base of DNSSEC? I guess the damage would be somewhat less if that key was exposed, but still.
- valarauca1 12y agoGolden Key security underlines DNSSEC and TLS. Fundamentally you are trusting 1 or very few agencies that they in fact have your security and best interests in mind. This is normally when somebody starts talking using GPG to replace TLS and DNSSEC systems. But this is normally somebody who doesn't realize how graph theory or at least path finding works, so they are ignored.
- wahern 12y agoIt's not the same as a Golden Key because you're not handing over your private keys to somebody else, nor are you trusting them to store private information. There's no substantive analogy to be made at all. Also, there are quite decent alternatives to DNSSEC. In particular, DNSCurve: http://dnscurve.org/ http://dnscurve.org/ PKI is admittedly a mess at the moment. News at 11. But that's irrelevant to arguments regarding Golden Keys, aka backdoors to your own, private information.
- sounds 12y agoToo true. Now that you're thinking along these lines, look at some of the alternative name-resolution systems and, hopefully, find one that you want to contribute to. We need at least one viable alternative to DNS. Competition.