News for hackers. Stuff that matters.

getoffyour

Re:Ask HN: What do productive people not do or do less of it? on Sunday February 24, 2019 @10:42PM (#19242714)
Complain

Focus on problems instead of solutions

Manipulate and put others down

Use people

Look up to Machiavelli

Passively consume food, media

Burn bridges

Judge others without all the facts; without due process

Act without thinking

“Anti-pattern” https://en.wikipedia.org/wiki/Anti-pattern

Re:Why CISA Issued Our First Emergency Directive on Sunday February 24, 2019 @05:10PM (#19240942)
This unwillingness may indicate a lack of competency, complacency as a market leader, or complicity with censoring regimes.

How f difficult is it to sign a zone?

DNSSEC isn't perfect (indeed it only provides assurances of record integrity and doesn't secure the channel); but it's certainly better than nothing, than no signature at all.

If route53 can't or won't or doesn't have to because they don't want to implement DNSSEC, route53 is not suitable for .gov and .mil domains.

It's really that simple.

I get that you want to use terraform; I don't see why you think route53 is the only DNS that terraform works with.