alt Hacker NewsFortunately, you can investigate this stuff for yourself and develop your own opinion. IMHO, DNSSEC doesn't actually "secure" much of anything. It can be disabled trivially by anyone operating a resolver. As I mentioned elsewhere, none of the major sites (FAANG) use it. What does that tell you?
Replies
ranger_danger • yesterday at 2:27 PM
Yes I'm not saying DNSSEC is or isn't good. I think a multi-layered approach would be best for redundancy.
➕ show 1 reply
Then propose a censorship resistant protocol.