News for hackers. Stuff that matters.

A comment on Calling time on DNSSEC: The costs exceed the benefits. Parent comment

Re:Calling time on DNSSEC: The costs exceed the benefits by peanut-walrus on Saturday June 03, 2023 @06:53PM (#36181279)
But that is exactly the point: in the world we are in right now, I DON'T have to trust the TLD operator to make sure my services are secure. Sure, there is a risk that the TLD operator will shut down my domain completely, but that is a different risk from the TLD operator MitM-ing my services.

If my CA misbehaves? I can use a different CA. Not trivial, but doable. What if my TLD operator misbehaves or TLD changes ownership (like the .org case a few years ago) - change my domain?

[ Parent | on HN ]
Re:Calling time on DNSSEC: The costs exceed the benefits by teddyh on Sunday June 04, 2023 @03:40PM (#36188817)
> What if my TLD operator misbehaves or TLD changes ownership (like the .org case a few years ago) - change my domain?

That already happens all the time. And when it does happen, the new owner can get a legitimate certificate for it.

[ Parent | on HN ]