User: Password:
Subscribe / Log in / New account

An interesting DNSSEC amplification

An interesting DNSSEC amplification

Posted Jul 15, 2010 14:37 UTC (Thu) by tialaramex (subscriber, #21167)
In reply to: An interesting DNSSEC amplification by Cyberax
Parent article: An interesting DNSSEC amplification

Yes, you should obtain and validate (the files will be GnuPG signed, and it is hoped that the people who sign are well connected in the web of trust) anchors for the root zone.

Eventually it is envisioned that OS vendors would provide and update these anchors, much as they all tend to offer timezone files updated with changes from the various civilian entities which claim authority to determine local time. The older anchors would become invalid after some period of time (I've forgotten, perhaps it's a year) and everyone would need to update often enough or switch off DNSSEC.

(Log in to post comments)

Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds