V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
zho6
V2EX  ›  分享发现

cloudflare 为全部客户域名启用 dnssec(Secure DNS for Every Domain)

  •  
  •   zho6 · 2015-11-12 19:46:43 +08:00 · 2409 次点击
    这是一个创建于 3305 天前的主题,其中的信息可能已经有所发展或是发生改变。
    博客原文 https://blog.cloudflare.com/introducing-universal-dnssec/

    目测了下 需要登入 cloudflare.com 手动开启 dnssec

    DNSSEC protects against forged DNS answers. DNSSEC protected zones are digitally signed to ensure the DNS records received are identical to the DNS records published by the zone owner.
    DNSSEC is pending while we wait for the DS to be added to your registrar. This usually takes ten minutes, but can take up to an hour.

    总的来说 非常感谢 cloudflare 在基础安全作出的努力
    h0wardc
        1
    h0wardc  
       2015-11-12 22:42:10 +08:00
    CloudFlare 好像真的可以解决以前很多有关于 DNSSEC 的 arguments..
    [If DNSSEC is so useful, why is its deployment non-existent for top domains?]( http://security.stackexchange.com/questions/21121/if-dnssec-is-so-useful-why-is-its-deployment-non-existent-for-top-domains)
    [A Case Against DNSSEC]( https://lists.dns-oarc.net/pipermail/dns-operations/2007-April/001441.html)

    想去 namecheap 玩一下才知道他们说了好几年到現在都还沒有支持..
    好想知道会不会有一天 gfw 反被墙回來 lol
    Had
        2
    Had  
       2015-11-13 14:59:53 +08:00
    目前在用 Godaddy+Dyn ,感觉还可以。
    关于   ·   帮助文档   ·   博客   ·   API   ·   FAQ   ·   实用小工具   ·   2820 人在线   最高记录 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 22ms · UTC 07:42 · PVG 15:42 · LAX 23:42 · JFK 02:42
    Developed with CodeLauncher
    ♥ Do have faith in what you're doing.