Comment

Comment by tptacek

No. DNSSEC does not encrypt the DNS. After DNSSEC is implemented, everyone will still be able to read DNS. The major difference will be that sites will store their TLS keys in the DNS, and will thus have vouchsafed them with a new set of CAs controlled by the Five Eyes governments.

DNSSEC isn't an imperfect protocol; it's harmful, a net loss.

And here we have Snowden twice advocating for it.

parent tptacek 11 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton