News for hackers. Stuff that matters.
Re:I fought my ISP's bad behavior and won by dingaling on Tuesday December 31, 2013 @06:26PM (#6993413)
DNSSEC is great in theory, but after three years I still haven't deployed a live instance.

It is cumbersome to implement and maintain, requiring co-operation of registrars and frequent key regeneration.

It is also very, very chatty and imposes a considerable processing burden on the first-hop DNS resolver.

We need a signed DNS solution that isn't DNSSEC.

There are no comments on this comment yet.