News for hackers. Stuff that matters.
Re:The DNSSEC master key securing DNS is about to change by wglb on Monday August 29, 2016 @03:05PM (#12384332)
There isn't any doubt about tptacek's credibility.

He points out how dnssec puts control in the hands of whatever government controls the domain, and your counter argument is about the strength of keys used to do so.

It makes your argument seem less like an argument on the merits of the issue and whether or not tptacek is a credible voice in the matter. Further, to call his arguments FUD takes you further down a path that is not increasing your own credibility.

Re:The DNSSEC master key securing DNS is about to change by dane-pgp on Monday August 29, 2016 @03:20PM (#12384478)
The question of whether DNSSEC "puts control in the hands of whatever government controls the domain" was addressed in the first link I sent:

http://blog.easydns.org/2015/08/06/for-dnssec/#government http://blog.easydns.org/2015/08/06/for-dnssec/#dane

Basically, whereas any CA (controlled by any government) can issue a certificate for any domain, with DNSSEC you at least get to pick which government you trust to secure your domain (or run your own generic TLD and not trust any government).

My counter argument about the strength of the keys was because he was the first to mention "1024 bit RSA". Did you miss that?

Finally, I used the term "FUD" to borrow the language from that EasyDNS article, the second sentence of which is: "Sadly, there is a lot of FUD out there and we wanted to both debunk that FUD and explain why DNSSEC is vital to the security of the internet." Hopefully people are reading both sides of the story here.