Cloudflare Introduces Universal DNSSEC: Secure DNS for Your Domain

#1

Post by darronz » Thu, Nov 12, 2015, 1:54 PM UTC

Cloudflare Introduces Universal DNSSEC: Secure DNS for Your Domain
cloudflare.com

Re: Cloudflare Introduces Universal DNSSEC: Secure DNS for Your Domain

#2

Post by collinmanderson » Thu, Nov 12, 2015, 1:59 PM UTC

Wow. Cloudflare is the perfect company to push DNSSEC forward. DNSSEC seems incredibly complicated and prone to amplification attacks, and I trust Cloudflare to get it right. :)

Re: Cloudflare Introduces Universal DNSSEC: Secure DNS for Your Domain

#3

Post by sintaxi » Thu, Nov 12, 2015, 2:09 PM UTC

Does this seem ironic to anyone else considering CloudFlares SSL offering essentially is a MITM attack?

Re: Cloudflare Introduces Universal DNSSEC: Secure DNS for Your Domain

#4

Post by [deleted] » Thu, Nov 12, 2015, 2:09 PM UTC

[deleted]

Re: Cloudflare Introduces Universal DNSSEC: Secure DNS for Your Domain

#5

Post by mtgx » Thu, Nov 12, 2015, 2:10 PM UTC

Why not DNSCurve? http://dnscurve.org

I mean, I feel like adoption is so low for DNSSEC already - does it even matter if it's 0% for DNSCurve or 1% adoption for DNSSEC? Why even bother with a 20 year old protocol?

Re: Cloudflare Introduces Universal DNSSEC: Secure DNS for Your Domain

#6

Post by [deleted] » Thu, Nov 12, 2015, 2:14 PM UTC

[deleted]

Re: Cloudflare Introduces Universal DNSSEC: Secure DNS for Your Domain

#7

Post by jgrahamc » Thu, Nov 12, 2015, 2:15 PM UTC

[deleted] wrote: post #6

[deleted]

Is darronz a CloudFlare employee?

Re: Cloudflare Introduces Universal DNSSEC: Secure DNS for Your Domain

#8

Post by jeromegv » Thu, Nov 12, 2015, 2:18 PM UTC

[deleted] wrote: post #6

[deleted]

I just got the announcement through my email so it seems more likely than a HN reader got the same announcement and decided to post about it.

Re: Cloudflare Introduces Universal DNSSEC: Secure DNS for Your Domain

#9

Post by jgrahamc » Thu, Nov 12, 2015, 2:23 PM UTC

sintaxi wrote: post #3

Does this seem ironic to anyone else considering CloudFlares SSL offering essentially is a MITM attack?

How is it an "attack"?

Re: Cloudflare Introduces Universal DNSSEC: Secure DNS for Your Domain

#10

Post by Tloewald » Thu, Nov 12, 2015, 2:26 PM UTC

sintaxi wrote: post #3

Does this seem ironic to anyone else considering CloudFlares SSL offering essentially is a MITM attack?

How is Cloudflare SSL a MITM attack? Obviously, they're in the middle, but you have to trust someone.