Re:Ask HN: Cloudflare broke my domain's DNSSEC making it unr...
by ceejayoz on Tuesday May 17, 2022 @03:47PM
(#31415503)
But if a bunch of large, well-staffed, engineering-focused, otherwise competent organizations manage to fuck it up regularly, the problem's probably above the individual organizations. Potentially with the spec itself.
[ Parent
| on HN ]
Re:Ask HN: Cloudflare broke my domain's DNSSEC making it unr...
by paulnpace on Wednesday May 18, 2022 @07:45AM
(#31421569)
I've seen far more failed certificate renewal failures than DNSSEC failures from the same teams you appear to be suggesting are perfect and the standard is flawed.
Re:Ask HN: Cloudflare broke my domain's DNSSEC making it unr...
by tptacek on Thursday May 19, 2022 @03:10PM
(#31438790)
The consequences of a failed certificate renewal are much smaller than the consequences of a DNSSEC failure: if you screw up DNSSEC, your site falls off the Internet, as if it never existed.