News for hackers. Stuff that matters.

A comment on I fought my ISP's bad behavior and won. Parent comment

Re:I fought my ISP's bad behavior and won by Procrastes on Tuesday December 31, 2013 @05:14PM (#6993123)
It's interesting no one brought up DNSSEC[1]. Has anything happened there since 2010?

1. http://en.wikipedia.org/wiki/Domain_Name_System_Security_Ext...

[ Parent | on HN ]
Re:I fought my ISP's bad behavior and won by dingaling on Tuesday December 31, 2013 @06:26PM (#6993413)
DNSSEC is great in theory, but after three years I still haven't deployed a live instance.

It is cumbersome to implement and maintain, requiring co-operation of registrars and frequent key regeneration.

It is also very, very chatty and imposes a considerable processing burden on the first-hop DNS resolver.

We need a signed DNS solution that isn't DNSSEC.

[ Parent | on HN ]
Re:I fought my ISP's bad behavior and won by helfire on Tuesday December 31, 2013 @05:16PM (#6993142)
I was going to mention it, but I haven't found anyone using it or a usable implementation.
[ Parent | on HN ]