News for hackers. Stuff that matters.

A comment on Universal DNSSEC: Secure DNS for Every Domain. Parent comment

Re:Universal DNSSEC: Secure DNS for Every Domain by tptacek on Tuesday November 10, 2015 @11:30AM (#10540269)
I am not worried about attacks from Tunisia. I am worried about GCHQ.

DNSSEC deters marginal threats at the cost of encouraging serious threats. That's not a good tradeoff.

[ Parent | on HN ]
Re:Universal DNSSEC: Secure DNS for Every Domain by sarciszewski on Tuesday November 10, 2015 @11:57AM (#10540482)
> I am not worried about attacks from Tunisia.

Why not?

> I am worried about GCHQ.

I don't contest this part.

[ Parent | on HN ]
Re:Universal DNSSEC: Secure DNS for Every Domain by tptacek on Tuesday November 10, 2015 @11:58AM (#10540489)
At least with respect to web security, even people in Tunisia can avoid Tunisian intercept just by not using Tunisian services. But virtually no one can avoid .COM.
[ Parent | on HN ]
Re:Universal DNSSEC: Secure DNS for Every Domain by sarciszewski on Tuesday November 10, 2015 @01:48PM (#10541414)
Oh. I was expecting something like, "I have secret knowledge that Tunisia's government employs less skilled attackers than the UK's."
[ Parent | on HN ]