News for hackers. Stuff that matters.

A comment on Ask HN: What happens to ".io" TLD after UK gives back the Chagos Islands?. Parent comment

Re:Ask HN: What happens to ".io" TLD after UK gives back the... by Avamander on Thursday October 03, 2024 @09:03AM (#41730409)
Outages and poor management are one possibility. Other is the fact that you have to trust the country running the ccTLD with DNSSEC keys. This might rule out things like using TLSA/DANE or SSHFP records.
[ Parent | on HN ]
Re:Ask HN: What happens to ".io" TLD after UK gives back the... by EE84M3i on Thursday October 03, 2024 @09:16AM (#41730496)
I think more relevantly than DNSSEC, couldn't they issue TLS certificates using DNS-01 validation? You have to trust your DNS registry.
[ Parent | on HN ]
Re:Ask HN: What happens to ".io" TLD after UK gives back the... by Avamander on Thursday October 03, 2024 @11:21AM (#41731605)
They could, but WebPKI things get logged, doing split-horizon DNS for your victims doesn't.
[ Parent | on HN ]