3 ms·
Oh, don't get me wrong: I actually like absolutely nothing about DNSSEC. I just don't think "It has a worse security model than HTTPS" is a true statement. I
by amalcon 11y ago
Oh, don't get me wrong: I actually like absolutely nothing about DNSSEC.
I just don't think "It has a worse security model than HTTPS" is a true statement. I think smart people need to keep working on the authentication problem, because we clearly have not solved it yet -- including with DNSSEC.
- yuhong 11y agoYea, I have been thinking about a DNSSEC2 that would for example uses online signing for a while now, in addition to things like DNSCurve/DNSCrypt.