Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

DNSSEC isn't "connectionless"; DNSSEC responses frequently exceed the maximum UDP packet size.

TLS DNS provides confidentiality, in addition to hop-by-hop integrity; DNSSEC provides no integrity, which has led to a decade of rationalizing by its advocates about DNS not "needing" confidentiality.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: