Re:RFC 9518 – What can internet standards do about centralis...
by teddyh on Sunday December 24, 2023 @12:13AM
(#38751321)
The suggestion to use “blockchain” came from user jongjong, not me. I therefore cannot elaborate on it.
> DNSSEC, by contrast, is 100% a centralized PKI system.
Again, my point is that just because something can have, or has, a central point, does not mean it is “centralized”. The DNSSEC root cannot override individual DNS records on the domain or subdomain levels. DNS (and DNSSEC) is federated; i.e. it delegates absolute authority over sections to others, which can in turn delegate authority for domains to yet other, which can in turn delegate authority over subdomains, and so on.
To make an analogy again: The US federal government does not possess absolute authority over the states. The UN does not possess absolute authority over its member nations (or other nations). Interpol does not possess absolute authority over every police force in the world. And so on.
> DNSSEC, by contrast, is 100% a centralized PKI system.
Again, my point is that just because something can have, or has, a central point, does not mean it is “centralized”. The DNSSEC root cannot override individual DNS records on the domain or subdomain levels. DNS (and DNSSEC) is federated; i.e. it delegates absolute authority over sections to others, which can in turn delegate authority for domains to yet other, which can in turn delegate authority over subdomains, and so on.
To make an analogy again: The US federal government does not possess absolute authority over the states. The UN does not possess absolute authority over its member nations (or other nations). Interpol does not possess absolute authority over every police force in the world. And so on.