Hari, Financial cost is not the only consideration. DNSSEC, as you know, makes DNS more complex and easier to break. If you do it wrong your website isn't visible.
Rgds, McTim On 11/17/11, Hari Kurup <[email protected]> wrote: > On 17 November 2011 19:13, McTim <[email protected]> wrote: >> On 11/17/11, Reinier Battenberg <[email protected]> >> wrote: >>> >>> from a domain owner perspective, do we need to do anything to (for >>> example) >>> sign mountbatten.ug ? >> >> if you want to secure the zone, yes, and then pass the DS record to the >> parent. >> >> If you are suffering from MitM attacks, then its useful, if not, >> debatable in terms of cost vs benefit. > > > I'd say it is useful if you want to *protect* yourself from > man-in-the-middle attacks, cache poisoning and other malicious > activity. > I don't think the cost of deployment for a registrant/domain owner is > that significant. > Otherwise Reinier, you do not *have* to do anything - dnssec is > optional and backward compatible. I am guessing CFI will set up a test > bed for people to play around with first. > > -- > Hari > _______________________________________________ > The Uganda Linux User Group: http://linux.or.ug > > Send messages to this mailing list by addressing e-mails to: [email protected] > Mailing list archives: http://www.mail-archive.com/[email protected]/ > Mailing list settings: http://kym.net/mailman/listinfo/lug > To unsubscribe: http://kym.net/mailman/options/lug > > The Uganda LUG mailing list is generously hosted by INFOCOM: > http://www.infocom.co.ug/ > > The above comments and data are owned by whoever posted them (including > attachments if any). The mailing list host is not responsible for them in > any way. > -- Cheers, McTim "A name indicates what we seek. An address indicates where it is. A route indicates how we get there." Jon Postel _______________________________________________ The Uganda Linux User Group: http://linux.or.ug Send messages to this mailing list by addressing e-mails to: [email protected] Mailing list archives: http://www.mail-archive.com/[email protected]/ Mailing list settings: http://kym.net/mailman/listinfo/lug To unsubscribe: http://kym.net/mailman/options/lug The Uganda LUG mailing list is generously hosted by INFOCOM: http://www.infocom.co.ug/ The above comments and data are owned by whoever posted them (including attachments if any). The mailing list host is not responsible for them in any way.
