Recent Features
| |||||||||||||
An interesting DNSSEC amplificationAn interesting DNSSEC amplificationPosted Jul 15, 2010 14:37 UTC (Thu) by tialaramex (subscriber, #21167)In reply to: An interesting DNSSEC amplification by Cyberax Parent article: An interesting DNSSEC amplification
Yes, you should obtain and validate (the files will be GnuPG signed, and it is hoped that the people who sign are well connected in the web of trust) anchors for the root zone.
Eventually it is envisioned that OS vendors would provide and update these anchors, much as they all tend to offer timezone files updated with changes from the various civilian entities which claim authority to determine local time. The older anchors would become invalid after some period of time (I've forgotten, perhaps it's a year) and everyone would need to update often enough or switch off DNSSEC.
(Log in to post comments)
|
|||||||||||||