News for hackers. Stuff that matters.

A comment on Stopping FTP support in Firefox 90. Parent comment

Re:Stopping FTP support in Firefox 90 by AstralStorm on Wednesday July 21, 2021 @11:02AM (#27907251)
Solved if DNSSEC is deployed and root certificates are available as they should be pinned.

What, you're using old unsigned DNS and complaining about security? Or software so old that pinned certificates are outdated?

[ Parent | on HN ]
Re:Stopping FTP support in Firefox 90 by tptacek on Wednesday July 21, 2021 @06:58PM (#27913220)
Virtually none of the DNS hierarchy signed with DNSSEC, and it's unlikely it ever will be. It's a strange best practice to appeal to, since it's been categorically rejected by almost every security team in the industry.
[ Parent | on HN ]