Hacker News new | past | comments | ask | show | jobs | submit login

> It works whether specific users know about it or not. That is not the case for DNSSEC.

I am baffled by this claim. DNSSEC works completely transparently to the user.

Also, we were comparing the specifics of MTA-STS to DANE, not to DNSSEC. Both MTA-STS and DANE solves the same problem, i.e. fake X.509 certificates and/or protocol degradation (SSL stripping). DANE has the potential to solve the same problem for every protocol, not just SMTP, while MTA-STS is both specific to e-mail, and stupidly requires an additional web server on every SMTP server.

> and falling

It’s actually rising again, according to your sources.

In recent years, you seem to have dropped all pretense of arguing against the specifics of DNSSEC, which is good, but you have then resorted to argumentum ad populum. However, this is a bad form of argumentation unless you can explain why DNSSEC is not as popular as it could be. For instance, what happened in late 2023 to cause the dip?




The chart is right there upthread for anybody interested to see. No, I haven't dropped any of my arguments against DNSSEC.


Yes, anyone can see the trend has now turned upwards again. Including you, if you would look.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: