Re:Calling time on DNSSEC: The costs exceed the benefits
by teddyh on Saturday June 03, 2023 @04:42PM
(#36180347)
What do think a ccTLD is, if not a TLD controlled by a country, meaning the government of that country? In what world would it be reasonable for you to have a .ly domain and not trust the Libyan government not to do whatever they like to your domain? Like, you know, everybody already does with every .com and the U.S. government?
[ Parent
| on HN ]
Re:Calling time on DNSSEC: The costs exceed the benefits
by peanut-walrus on Saturday June 03, 2023 @06:53PM
(#36181279)
But that is exactly the point: in the world we are in right now, I DON'T have to trust the TLD operator to make sure my services are secure. Sure, there is a risk that the TLD operator will shut down my domain completely, but that is a different risk from the TLD operator MitM-ing my services.
If my CA misbehaves? I can use a different CA. Not trivial, but doable. What if my TLD operator misbehaves or TLD changes ownership (like the .org case a few years ago) - change my domain?
Re:Calling time on DNSSEC: The costs exceed the benefits
by teddyh on Sunday June 04, 2023 @03:40PM
(#36188817)
> What if my TLD operator misbehaves or TLD changes ownership (like the .org case a few years ago) - change my domain?
That already happens all the time. And when it does happen, the new owner can get a legitimate certificate for it.