Re: [nznog] Enabling DNSSEC for the .nz Second Level Domains

Joe Abley (jabley) writes:

(And note again that (b) doesn't close the door to DNS poisoning attacks, it just moves the target from the cache to the stub resolver. This is a harder target, but it's still a target.)

Last mile is always the most expensive. Forget FTTH, it's DTTA/DTTH we want :)