BLU Discuss list archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Discuss] free SSL certs from the EFF
- Subject: [Discuss] free SSL certs from the EFF
- From: invalid at pizzashack.org (Derek Martin)
- Date: Tue, 25 Nov 2014 12:40:13 -0600
- In-reply-to: <54749D27.2000507@gmail.com>
- References: <546C4823.6060900@gmail.com> <BN3PR0401MB1204BAB10AE6249C54E4E81BDC760@BN3PR0401MB1204.namprd04.prod.outlook.com> <54737E7C.5040506@mattgillen.net> <BN3PR0401MB1204CDD16766109B0CD095ECDC730@BN3PR0401MB1204.namprd04.prod.outlook.com> <54749D27.2000507@gmail.com>
On Tue, Nov 25, 2014 at 10:15:51AM -0500, Richard Pieri wrote: > On 11/25/2014 6:28 AM, Edward Ned Harvey (blu) wrote: > >Based on my understanding of DNSSEC, it doesn't add security except > >in esoteric edge cases. > > DNSSEC exists to solve one problem: cache poisoning. It does so by > digitally signing entire zones. That's not security; it's > authenticity. Authentication is one aspect of security (it is famously one of the three A's of security, the other two being authorization and auditability), so sure, yes, it is security. It is not COMPLETE security... but complete security is a fairy tale. -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0xDFBEAD02 -=-=-=-=- This message is posted from an invalid address. Replying to it will result in undeliverable mail due to spam prevention. Sorry for the inconvenience.
- Follow-Ups:
- [Discuss] free SSL certs from the EFF
- From: Steven at simplycircus.com (Steven Santos)
- [Discuss] free SSL certs from the EFF
- References:
- [Discuss] free SSL certs from the EFF
- From: tmetro+blu at gmail.com (Tom Metro)
- [Discuss] free SSL certs from the EFF
- From: blu at nedharvey.com (Edward Ned Harvey (blu))
- [Discuss] free SSL certs from the EFF
- From: me at mattgillen.net (Matthew Gillen)
- [Discuss] free SSL certs from the EFF
- From: blu at nedharvey.com (Edward Ned Harvey (blu))
- [Discuss] free SSL certs from the EFF
- From: richard.pieri at gmail.com (Richard Pieri)
- [Discuss] free SSL certs from the EFF
- Prev by Date: [Discuss] root CA bloat
- Next by Date: [Discuss] root CA bloat
- Previous by thread: [Discuss] free SSL certs from the EFF
- Next by thread: [Discuss] free SSL certs from the EFF
- Index(es):