Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Dnssec also does not solve bgp hijacking

This seems like a pretty unreasonable complaint. Dnssec also doesn't stop phishing. Or nukes.



Where it's a complaint worth making is that every time there's a BGP Hijack there are a series of articles written incorrectly claiming DNSSEC would have prevented it.


What does dnssec solve then?


Authenticity of dns records. Making sure that the dns record points to the correct ip address.

Whether or not an ip address goes to the correct computer is totally unrelated to DNS, so i'm not sure why anyone would think that has anything to do with a dns security measure.

The relavant security thing for bgp is called rpki.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: