News for hackers. Stuff that matters.
Re:.de TLD offline due to DNSSEC? by the8472 on Tuesday May 05, 2026 @06:16PM (#48029461)
fail-closed protocols have introduced some brittleness. A HTTP 1.0 server from 1999 probably still can service visitors today. A HTTPS/TLS 1.0 server from the same year wouldn't.
Re:.de TLD offline due to DNSSEC? by fc417fc802 on Tuesday May 05, 2026 @11:05PM (#48031647)
You're not wrong but objecting to fail-closed in a security sensitive context is entirely missing the point.
Re:.de TLD offline due to DNSSEC? by the8472 on Saturday May 16, 2026 @11:58AM (#48161319)
Giving up on robustness is capitulation on a social-technical interface. "users can't be trusted, we can't have any fallbacks, ever" is a problem that needs to be solved.
Re:.de TLD offline due to DNSSEC? by zelon88 on Wednesday May 06, 2026 @01:35AM (#48032621)
I think I see the point you're making here and I agree.

There is designing something to be fail-closed because it needs to be secure in a physical sense (actually secure, physically protected), and then there's designing something fail-closed because it needs to be secure from an intellectual sense (gatekept, intellectually protected). While most of the internet is "open source" by nature, the complexity has been increased to the point where significant financial and technical investment must be made to even just participate. We've let the gatekeepers raise the gates so high that nobody can reach them. AI will let the gatekeepers keep raising the gates, but then even they won't be able to reach the top. Then what?

I think the point you're trying to make, put another way is in the context of "availability" and "accessibility" we've compromised a lot of both availability and accessibility in the name of security since the dawn of the internet. How much of that security actually benefits the internet, and how much of that security hinders it? How much of it exists as a gatekeeping measure by those who can afford to write the rules?

Re:.de TLD offline due to DNSSEC? by sam_lowry_ on Wednesday May 06, 2026 @04:26AM (#48033711)
This is why I still run my blog on HTTP/1.1 only.
Re:.de TLD offline due to DNSSEC? by account42 on Wednesday May 06, 2026 @06:31AM (#48034617)
What no HTTP/1.0 for those of us too lazy to type the Host header into telnet???
Re:.de TLD offline due to DNSSEC? by sam_lowry_ on Wednesday May 06, 2026 @06:39AM (#48034669)
Oh, because I host it with a few more sites on my tiny Hetzner cloud server.
Re:.de TLD offline due to DNSSEC? by account42 on Wednesday May 06, 2026 @06:30AM (#48034604)
Backwards compatibility is unfortunately not something security folk care about.