On 7/06/2011 9:11 p.m., Jay Daley wrote:
it is important for us in NZRS to understand the community views on our DNSSEC plans.
http://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions - I confess I haven't even gone as far as reading the wikipedia page to gain a vague understanding of what DNSSEC is, other than already understanding it's a security system for enhancing confidence that the web site you're looking at is actually just that. A decade ago Geoff Huston wrote an article about the internet being a trust domain which stuck with me, so I get some of where Dean is coming from. So, if the issue is trust and confidence and then I see Dean openly questioning the system then I'm left thinking.... Dean is a person I respect for his technical ability, so if he doesn't yet trust this new system then that tells me it's currently valueless. So what recommendation would I give to a client or associate (for what that's worth) "Well Dean doesn't currently trust it, I couldn't recommend putting to much investment in it until I at a very least see him express his confidence in the system". Make of those views what you will :) D