Re:How to setup your own WKD server
by alwillis on Tuesday February 18, 2020 @02:53PM
(#22359671)
If you store your PGP key in the DNS, then the entities that control the DNS can control your key.
As for the trope of DNSSEC being a government controlled PKI, I can’t help you with that.
The beauty of DNSSEC is its flexibility. For the paranoid, a zone operator using DNSSEC only has to trust themselves and nobody else by creating their own trust anchor.
And of course, I control they keys and when they rollover, etc.
But even under normal conditions, where you trust the root key and the chain of trust from it, nobody—not even the government—is going to break my ECC keys before they get rolled over.
As for the trope of DNSSEC being a government controlled PKI, I can’t help you with that.
The beauty of DNSSEC is its flexibility. For the paranoid, a zone operator using DNSSEC only has to trust themselves and nobody else by creating their own trust anchor.
And of course, I control they keys and when they rollover, etc.
But even under normal conditions, where you trust the root key and the chain of trust from it, nobody—not even the government—is going to break my ECC keys before they get rolled over.
So there’s that.