News for hackers. Stuff that matters.

A comment on Calling time on DNSSEC: The costs exceed the benefits. Parent comment

Re:Calling time on DNSSEC: The costs exceed the benefits by viraptor on Saturday June 03, 2023 @08:38AM (#36176173)
> MitM upstream from resolver

And even this part is also mostly solved by DoH. (Unless someone can mitm you and spoof certificates, which means you're targeted by some organisations with serious resources...)

[ Parent | on HN ]
Re:Calling time on DNSSEC: The costs exceed the benefits by dingaling on Saturday June 03, 2023 @01:07PM (#36178384)
The problem with DoH is that it reinforces the certificate hegemony.

Anyone can set up DNSSEC and run it without applying for authorisation from another party. But DoH requires a certificate signed by a CA trusted globally.

[ Parent | on HN ]
Re:Calling time on DNSSEC: The costs exceed the benefits by tptacek on Saturday June 03, 2023 @02:53PM (#36179459)
And those certificates are so expensive!
[ Parent | on HN ]