tqbf

Original source

Imported from historical reading log.

  • Extracted main post via api.fxtwitter.com fallback.
  • Thomas Ptacek (tqbf) resurfaces his 2015 essay Against DNSSEC: https://sockpuppet.org/blog/2015/01/15/against-dnssec/
  • Core gist of the linked essay:
  • Why it matters now: good historical context for the recent .de / DNSSEC outage discussion cluster and the tradeoff between cryptographic integrity and operational fragility.
  • Good newsletter angle: old anti-DNSSEC argument worth rereading during a real-world DNSSEC-linked ccTLD failure.