4 ms·
I'm also interested in this. DNSCurve? Something else?
by iyn 11y ago
I'm also interested in this. DNSCurve? Something else?
- xorcist 11y agoDNSCurve solves none of the problems DNSSEC solves, and vice versa. The only realistic alternative to the DNSSEC PKI is the global SSL CA PKI, with authenticating higher up in the protocol stack. That does not necessarily mean status quo though, as the latter have obvious room for improvement.