Re:For DNSSEC
by indolering on Thursday August 06, 2015 @09:42PM
(#10020521)
That would force companies to either own all of the front-end server farms or store their keys on machines in untrustworthy environments.
[ Parent
| on HN ]
Yes: a choice between two very unattractive options. Isn't DNSSEC great?
Re:For DNSSEC
by indolering on Tuesday August 11, 2015 @05:04PM
(#10044381)
Uh? You can run everything in offline mode, unless you really care about trivial zone enumeration.
I am not talking about the current DNSSEC, of course.