Finally got around to reading Geoff Huston’s comprehensive, heartbreaking eulogy for DNSSEC. He takes the thought-provoking position that TLS has largely subsumed the need for DNSSEC – not perfectly, and with a somewhat different threat model, but still. Great networking neckbeard reading, as always.
Thanks for sharing, gonna go read it now 🍿