Statement on DNS Encryption [pdf]

Re:Statement on DNS Encryption [pdf] by bombcar on Wednesday April 21, 2021 @04:25PM (#26894983)

Given the amount of crap traffic the root servers get I can see why they’d be hesitant to just turn on DNSSEC. “Let’s see you all stop sending us stupid shit queries first” sounds entirely reasonable.

[ Parent | on HN ]

Re:Statement on DNS Encryption [pdf] by _-david-_ on Wednesday April 21, 2021 @06:46PM (#26896374)

The PDF is about DNS Encryption not DNSSEC. Some (all?) of the root servers already support DNSSEC.

[ Parent | on HN ]

Re:Statement on DNS Encryption [pdf] by schoen on Wednesday April 21, 2021 @08:13PM (#26897053)

All, since 2010.

https://www.iana.org/dnssec/archive

Although this is a big "just" because of the amount of fanfare and (literal) ceremony, DNSSEC support on the server side is just about signing zones and being willing to serve the associated RR types.

[ Parent | on HN ]