| ▲ | icedchai 4 hours ago | |
Fortunately, you can investigate this stuff for yourself and develop your own opinion. IMHO, DNSSEC doesn't actually "secure" much of anything. It can be disabled trivially by anyone operating a resolver. As I mentioned elsewhere, none of the major sites (FAANG) use it. What does that tell you? | ||
| ▲ | ranger_danger 3 hours ago | parent [-] | |
Yes I'm not saying DNSSEC is or isn't good. I think a multi-layered approach would be best for redundancy. | ||