> However if you extend this to other additional data then you defeat > various useful optimisations.
If these optimisations necessarily break security they must be dropped, however useful. If "useful" means that the internet will melt without them then we need a new system and to retire DNS.
> DNSSEC is the answer :-) I take the smiley to mean that I shouldn't go ahead and use DNSSEC on my machines (at least not yet).
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
no subject
Date: 2008-07-24 13:32 (UTC)> various useful optimisations.
If these optimisations necessarily break security they must be dropped, however useful. If "useful" means that the internet will melt without them then we need a new system and to retire DNS.
> DNSSEC is the answer :-)
I take the smiley to mean that I shouldn't go ahead and use DNSSEC on my machines (at least not yet).