tqbf
Imported from historical reading log.
- Extracted main post via
api.fxtwitter.comfallback. - Thomas Ptacek (
tqbf) resurfaces his 2015 essayAgainst DNSSEC: https://sockpuppet.org/blog/2015/01/15/against-dnssec/ - Core gist of the linked essay:
- Why it matters now: good historical context for the recent
.de/ DNSSEC outage discussion cluster and the tradeoff between cryptographic integrity and operational fragility. - Good newsletter angle:
old anti-DNSSEC argument worth rereading during a real-world DNSSEC-linked ccTLD failure.