News for hackers. Stuff that matters.

A comment on Ask HN: How bad is it to use a self-signed SSL certificate?. Parent comment

Re:Ask HN: How bad is it to use a self-signed SSL certificate? by chimeracoder on Saturday May 31, 2014 @02:46PM (#7826846)
> I keep seeing it mentioned in HN threads as a Good Thing,

Opinions on DNSSEC are... mixed, to say the least: https://news.ycombinator.com/item?id=5571937

As a small website owner, are you using TLS? That's the biggest single thing you should be doing - don't worry about DNSSEC.

This depends on what you mean by "small", but IMHO, you don't need DNSSEC. Depending on how small/important your website is, you probably don't even need to bother with DNSCurve either, though you might like to for the fun of it.

[ Parent | on HN ]
Re:Ask HN: How bad is it to use a self-signed SSL certificate? by Osmium on Saturday May 31, 2014 @02:55PM (#7826885)
Thanks for the link; that's actually very informative. My interest in DNSSEC came from reading that it provided a mechanism to securely transmit SSH host key fingerprints, though I'm not sure if there's a better way of doing that.

> As a small website owner, are you using TLS?

Yes, but I don't require it. Just a free certificate from StartSSL.

[ Parent | on HN ]