Re:DNSSEC surpasses 50% of root domains
by nly on Friday January 24, 2014 @09:51AM
(#7115090)
DNSCurve hasn't seen any implementation love. Seems to be a dormant project since ~2011.
[ Parent
| on HN ]
For the last 15 years people have said that about everything Daniel Bernstein wrote. Meanwhile, people deploy the stuff, use it, don't have security holes, get better performance, and generally don't have to think about it every week... see if you can say that about BIND.
Occasionally, mostly DJB, programmers write code and it is DONE. This is such an astonishing accomplishment that when it happens, it is mistakenly branded for not being "active".
I've been running CurveDNS (http://curvedns.on2it.net) for the last few years for a few externally facing sites.
I get about 1-2% of my requests via DNSCurve, almost entirely from OpenDNS, which started supporting it years ago: http://blog.opendns.com/2010/02/23/opendns-dnscurve/
The problem is mainly in the tooling - there aren't good query and diagnostic tools out there for DNSCurve, beyond fairly complicated CLI incantations.
It'd be pretty nice if the last blog post was more recent than 3 years. It's also really nice to know that curvedns-0.87 has been downloaded 1050 times... but i have no idea when it was actually released. No sign of a changelog... No public repository? No mailing list?
All of these crypto projects (Nacl, CurveDNS) would benefit from moving to Github. Nobody's going to use a seemingly stagnant project. That's ultimately the problem with most of djbs best work, and a lot of other good work, I think. He does world class research and reference implementation, but it doesn't feel like there's an open source community rallying around it.
We need more Linus' in the crypto world.