4 Apr
2009
4 Apr
'09
11:40 p.m.
* Randy Bush:
But looking back at incidents such as the Zonelabs/Abovenet issue, your advice is correct for the network we have today.
as that rfc is over a decade old, i am not optimistic that change is neigh <sigh>.
DNSSEC obscures quite a few failures which can hit secondaries. I think it changes the cost/benefit ratio of additional name service somewhat. Without DNSSEC, it's just another party who can redirect your traffic to Elbonia, so I understand if folks are quite conservative about it.