Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Dammit! I was 24 hours away from posting my DNSSEC post! You win this time...

For what it's worth, the first KEY/SIG/NXT DNSSEC draft dates back to 1994(!)



For what it's worth, I was planning to write this already for a few weeks but did not get around to it. It struck more of a nerve than I thought. I know the draft was earlier, but implementation really should have started after the draft was published.

Anyway, I now have a lunch appointment with Olaf Kolkman et al on Thursday to hopefully improve matters.


I'm being sort of silly; hating DNSSEC is like my life's work.


What do you think the most viable alternative is? DNSCurve?


Doing nothing at all is a better option than DNSSEC. Not kidding.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: