News for hackers. Stuff that matters.

A comment on DNSSEC failures are how you get people to disable DNSSEC.

Re:DNSSEC failures are how you get people to disable DNSSEC by teddyh on Thursday June 01, 2023 @05:34AM (#36149044)
> Exhorting people to not screw up things like DNSSEC KSK rollover clearly hasn't worked, so the only real solution would be better ways to automatically recover from it.

No, the solution is to automate the rollovers, so that they can’t be screwed up by manual handling. <https://github.com/DNSSEC-Provisioning/music>

[ Parent | on HN ]

There are no comments on this comment yet.