5 ms·

What alternatives to DNSSEC do you advocate?

• tptacek 12y ago
  Step 1: Scrap DNSSEC Step 2: Return to drawing board Step 3: Wait for better solution to emerge Step 4: Repeat until value of new DNS security system exceeds cost of deployment Step 5: Profit I expect never to reach Step 5, but who knows?
  • danyork 12y ago
    > Step 2: Return to drawing board > Step 3: Wait for better solution to emerge I, and I suspect many others, eagerly await the better solution to the DNS security issues we see. If you have one (beyond "do nothing"), please explain it. Lacking that, we focus on deploying DNSSEC because that is what we have AVAILABLE today.
    • tptacek 12y ago
      This is literally: http://en.wikipedia.org/wiki/Politician%27s_syllogism http://en.wikipedia.org/wiki/Politician%27s_syllogism
  • yuhong 12y ago
    DNSCurve already exists fortunately.