3 ms·
DNSCurve solves none of the problems DNSSEC solves, and vice versa. The only realistic alternative to the DNSSEC PKI is the global SSL CA PKI, with authenticat
by xorcist 11y ago
DNSCurve solves none of the problems DNSSEC solves, and vice versa.
The only realistic alternative to the DNSSEC PKI is the global SSL CA PKI, with authenticating higher up in the protocol stack. That does not necessarily mean status quo though, as the latter have obvious room for improvement.