Remix.run Logo
▲ ranger_danger 4 hours ago

I have seen their comments across this site for a very long time. Unfortunately I do not respect or put any stock in what they say, because of how unbelievably rude and dogmatic they are, and always have been.

"As a rule, strong feelings about issues do not emerge from deep understanding."

▲icedchai 4 hours ago | parent [-]

Fortunately, you can investigate this stuff for yourself and develop your own opinion. IMHO, DNSSEC doesn't actually "secure" much of anything. It can be disabled trivially by anyone operating a resolver. As I mentioned elsewhere, none of the major sites (FAANG) use it. What does that tell you?

▲ranger_danger 3 hours ago | parent [-]

Yes I'm not saying DNSSEC is or isn't good. I think a multi-layered approach would be best for redundancy.