[dns-operations] OpenDNS adopts DNSCurve

Colm MacCárthaigh colm at stdlib.net
Fri Feb 26 05:10:25 UTC 2010


On Thu, Feb 25, 2010 at 6:57 PM, Mike Damm <mike at damm.com> wrote:
> How would people implement something like whoami.ultradns.net using DNSSEC?
> I ask this seriously because pre-signing seems to be the catch all answer
> for the more dynamic things people want to do with DNS, but I don't believe
> people understand how poorly that scales.

This seems like it's less work, and less of a problem than say ...
rendering a dynamic webpage. The same kind of defenses work;
rate-limit expensive requests, and caching the compute-intensive
responses for repeat viewing.

-- 
Colm



More information about the dns-operations mailing list