# BLU Discuss list archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

# [Discuss] Why the dislike of X.509?

*Subject*: [Discuss] Why the dislike of X.509?*From*: richard.pieri at gmail.com (Richard Pieri)*Date*: Tue, 26 Aug 2014 13:29:56 -0400*In-reply-to*: <sjmiolfch7y.fsf@securerf.ihtfp.org>*References*: <53F9F6B9.4060505@stephenadler.com> <20140824161132.GE14848@randomstring.org> <be314521ab6bebb6add54d706b042f01.squirrel@mail.mohawksoft.com> <53FA1C3B.70908@gmail.com> <53FB19E5.4080602@aeminium.org> <53FB4A5D.2030305@gmail.com> <CA+h9Qs5GnC6d1ejBQC=crtHwxoDiFWo4Kn+xjt0eiA8Kr733_A@mail.gmail.com> <53FB70E6.50706@gmail.com> <CA+h9Qs5THPNEir7tLZNjzLWMpod=9UGWTSCeZS2nCwVY0Ox=-w@mail.gmail.com> <53FB7F0A.40105@gmail.com> <253113e101a6fc1b75e160dfbd3d0dbe.squirrel@mail.mohawksoft.com> <53FB9325.9010200@gmail.com> <a7c1366d330261e2ee4906c8d08d0b94.squirrel@mail.mohawksoft.com> <53FB9E7A.5030808@gmail.com> <946844bdd8420720147712d216f1c037.squirrel@mail.mohawksoft.com> <53FCA1DD.60604@gmail.com> <sjmiolfch7y.fsf@securerf.ihtfp.org>

On 8/26/2014 1:07 PM, Derek Atkins wrote: > So where does DNS come in? I think most DNS experts would define it as The database -- all of the RRs and such -- is distributed. The system itself is a collection of centralized hierarchies with each central point being the root for each top-level domain. Any so-called expert who describes it otherwise is either not as expert as they think or being deliberately obtuse. > a "distributed" system. However there *is* a single entity that has > authority -- the root servers. Compromise of that would compromise the > whole DNS system. Precisely. > However there are watchdogs all over the world whose > role is preventing that. Yes, there are. This is one of the things that distinguishes DNS from SSL: there are no watchdogs over the root SSL authorities. By design. -- Rich P.

**References**:**[Discuss] vnc***From:*adler at stephenadler.com (Stephen Adler)

**[Discuss] vnc***From:*dsr at randomstring.org (Dan Ritter)

**[Discuss] vnc***From:*markw at mohawksoft.com (markw at mohawksoft.com)

**[Discuss] vnc***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] vnc***From:*nuno at aeminium.org (Nuno Sucena Almeida)

**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] Why the dislike of X.509?***From:*jabr at blu.org (John Abreau)

**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] Why the dislike of X.509?***From:*jabr at blu.org (John Abreau)

**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] Why the dislike of X.509?***From:*markw at mohawksoft.com (markw at mohawksoft.com)

**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] Why the dislike of X.509?***From:*markw at mohawksoft.com (markw at mohawksoft.com)

**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] Why the dislike of X.509?***From:*markw at mohawksoft.com (markw at mohawksoft.com)

**[Discuss] Why the dislike of X.509?***From:*richard.pieri at gmail.com (Richard Pieri)

**[Discuss] Why the dislike of X.509?***From:*warlord at MIT.EDU (Derek Atkins)

- Prev by Date:
**[Discuss] Why the dislike of X.509?** - Next by Date:
**[Discuss] Why the dislike of X.509?** - Previous by thread:
**[Discuss] Why the dislike of X.509?** - Next by thread:
**[Discuss] Why the dislike of X.509?** - Index(es):