Hacker News
points by tptacek 1 day ago | 0 comments
This is literally a presentation about Ukraine using its control over the DNS to manipulate queries from clients! Like, I like and support Ukraine and all, but this is the problem with top-down PKIs: states use them as policy instruments!
[–] teddyh 1 day ago
You are literally full of it. There are two presentations, where one only talks about the security benefits of DNSSEC and how Ukraine uses them to great advantage. From what I can tell, the other presentation also talks about that, but also talks about blocking threats at the resolver level. You know, like most public resolvers already (optionally) do. DNSSEC has nothing to do with this. DNSSEC is, instead, a defense against falsified information, should a user choose to use their own resolver instead of a centralized one.
[–] tptacek 1 day ago
Google [if-by-whiskey].
[–] teddyh 23 hours ago
Google [middlebrow dismissal]