Comment Comment by moquilabs In the FAQ of this article it says:> What’s the alternative to DNSSEC? > Do nothing. The DNS does not urgently need to be secured.> All effective security on the Internet assumes that DNS lookups are unsafe.This is not true, our entire infrastructure of ACME certificate authorities like let's encrypt are fundamentally dependent on DNS: https://letsencrypt.org/how-it-works/#domain-validationThen TLS verifies the domain with the private key the certificate authority issues...How can you trust the s (secure) in https then??Can anyone provide an example of "effective security on the Internet"? parent moquilabs 4 months ago
> What’s the alternative to DNSSEC? > Do nothing. The DNS does not urgently need to be secured.
> All effective security on the Internet assumes that DNS lookups are unsafe.
This is not true, our entire infrastructure of ACME certificate authorities like let's encrypt are fundamentally dependent on DNS: https://letsencrypt.org/how-it-works/#domain-validation
Then TLS verifies the domain with the private key the certificate authority issues...
How can you trust the s (secure) in https then??
Can anyone provide an example of "effective security on the Internet"?