News for hackers. Stuff that matters.
Re:DNSSEC surpasses 50% of root domains by nly on Friday January 24, 2014 @09:51AM (#7115090)
DNSCurve hasn't seen any implementation love. Seems to be a dormant project since ~2011.
Re:DNSSEC surpasses 50% of root domains by tptacek on Friday January 24, 2014 @10:58AM (#7115494)
For the last 15 years people have said that about everything Daniel Bernstein wrote. Meanwhile, people deploy the stuff, use it, don't have security holes, get better performance, and generally don't have to think about it every week... see if you can say that about BIND.
Re:DNSSEC surpasses 50% of root domains by wglb on Friday January 24, 2014 @11:17AM (#7115618)
Occasionally, mostly DJB, programmers write code and it is DONE. This is such an astonishing accomplishment that when it happens, it is mistakenly branded for not being "active".
Re:DNSSEC surpasses 50% of root domains by zdw on Friday January 24, 2014 @09:54AM (#7115105)
I've been running CurveDNS (http://curvedns.on2it.net) for the last few years for a few externally facing sites.

I get about 1-2% of my requests via DNSCurve, almost entirely from OpenDNS, which started supporting it years ago: http://blog.opendns.com/2010/02/23/opendns-dnscurve/

The problem is mainly in the tooling - there aren't good query and diagnostic tools out there for DNSCurve, beyond fairly complicated CLI incantations.

Re:DNSSEC surpasses 50% of root domains by nly on Friday January 24, 2014 @11:03AM (#7115533)
It'd be pretty nice if the last blog post was more recent than 3 years. It's also really nice to know that curvedns-0.87 has been downloaded 1050 times... but i have no idea when it was actually released. No sign of a changelog... No public repository? No mailing list?

All of these crypto projects (Nacl, CurveDNS) would benefit from moving to Github. Nobody's going to use a seemingly stagnant project. That's ultimately the problem with most of djbs best work, and a lot of other good work, I think. He does world class research and reference implementation, but it doesn't feel like there's an open source community rallying around it.

We need more Linus' in the crypto world.