Finally got around to reading Geoff Huston's comprehensive, heartbreaking eulogy of DNSSEC. He takes the thought-provoking position that TLS has largely subsumed the need for DNSSEC - not perfectly, and with a somewhat different threat model, but still. Great networking neckbeard reading, as always.
ISP Column - May 2024
Ryan /
npub1su…phe2s
2024-06-23 19:06:04
Author Public Key
npub1su4angctrnl26k9p77ad258wqrgyur2tyhcsqfsx0aywc0cw58xs7phe2sPublished at
2024-06-23 19:06:04Event JSON
{
"id": "c781eebafe019d2e085720b3c4f73da6041eca3d4fd771b048aa4e3be4bef55b",
"pubkey": "872bd9a30b1cfead58a1f7bad550ee00d04e0d4b25f10026067f48ec3f0ea1cd",
"created_at": 1719169564,
"kind": 1,
"tags": [
[
"proxy",
"https://bsky.brid.gy/convert/ap/at://did:plc:fdme4gb7mu7zrie7peay7tst/app.bsky.feed.post/3kvmhhnctis2l",
"activitypub"
]
],
"content": "Finally got around to reading Geoff Huston's comprehensive, heartbreaking eulogy of DNSSEC. He takes the thought-provoking position that TLS has largely subsumed the need for DNSSEC - not perfectly, and with a somewhat different threat model, but still. Great networking neckbeard reading, as always.\n\nISP Column - May 2024",
"sig": "f30cf5ed7a0ea5bc0ac25634ea041592d705896213ace906c650b7f8f58cdf02bea43406344ae08bf61278e7ac267cad7b264980cdbfda96a8c898ed028953fb"
}