| Linode Forum https://forum.linode.com/ |
|
| DNSSEC is wonderful https://forum.linode.com/viewtopic.php?f=19&t=10627 |
Page 1 of 1 |
| Author: | sednet [ Sun Nov 17, 2013 3:31 pm ] |
| Post subject: | DNSSEC is wonderful |
DNSSEC is very cool. It secures DNS preventing cache poisoning attacks and it allows you to generate trustworthy SSL certificates bound to your domain name at zero cost. We all hate the snake oil SSL certificate sellers don't we? I look around and nobody using DNSSEC yet. Why? Use it people, it's great! For an easy introduction I recommend this book: https://www.michaelwlucas.com/nonfiction/dnssec-mastery Or... Does nobody run their own DNS servers anymore? |
|
| Author: | hoopycat [ Sun Nov 17, 2013 7:14 pm ] |
| Post subject: | Re: DNSSEC is wonderful |
sednet wrote: Or... Does nobody run their own DNS servers anymore? +1 |
|
| Author: | staticsafe [ Sun Nov 17, 2013 7:41 pm ] |
| Post subject: | Re: DNSSEC is wonderful |
hoopycat wrote: sednet wrote: Or... Does nobody run their own DNS servers anymore? +1 I run my own DNS servers, and I have signed all the domains that my registrar(s) allow me to upload a DS/KSK for. BIND's inline-signing feature <3. |
|
| Author: | sednet [ Mon Nov 18, 2013 4:12 pm ] |
| Post subject: | Re: DNSSEC is wonderful |
staticsafe wrote: I run my own DNS servers, and I have signed all the domains that my registrar(s) allow me to upload a DS/KSK for. BIND's inline-signing feature <3. Sadly I'm having to change registrar just to upload my DS records. Most registrars are really dragging their feet on DNSSEC. BIND managed keys are very nice. |
|
| Author: | Cromulent [ Fri Dec 06, 2013 10:31 am ] |
| Post subject: | Re: DNSSEC is wonderful |
sednet wrote: staticsafe wrote: I run my own DNS servers, and I have signed all the domains that my registrar(s) allow me to upload a DS/KSK for. BIND's inline-signing feature <3. Sadly I'm having to change registrar just to upload my DS records. Most registrars are really dragging their feet on DNSSEC. BIND managed keys are very nice. Considering moving my domains to a new registrar for this exact reason. Which domain registrar did you go with in the end? I'm thinking of moving to Gandi.net. |
|
| Page 1 of 1 | All times are UTC-04:00 |
| Powered by phpBB® Forum Software © phpBB Group http://www.phpbb.com/ |
|