Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> "DNS is insecure and we don't want to fix that problem"

This isn't an accurate description of the anti-DNSSEC worldview. It's "DNS is untrusted, this is not a problem, and we want to keep it that way." If you're going to argue against it I think you need to portray the opposing side accurately.



I'm not describing a worldview; I'm describing the actual responses from the MTA-STS team during the IETF draft process. They did not say they wanted to keep DNS untrusted, they said that they did not think network operators were capable of understanding DNS security, and so the MTA-STS chose a different approach to securing SMTP.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: