* Posts by keith_nm

1 publicly visible post • joined 14 Apr 2010

Will DNSSEC kill your internet?

keith_nm
Go

Reports of Internet Death Exaggerated..

Despite the scary headline above, no-one is going to completely lose Internet service as a result of the signed root, or indeed any DNSSEC deployment efforts, and I certainly didn't say that. The worst that is going to happen is that a tiny minority of users behind mis-configured firewall or middleware boxes *may* experience some performance degradation when their clients have to attempt alternative paths for resolving names.

Data gathered by DNS-OARC on the root signing transition [see http://www.root-dnssec.org/wp-content/uploads/2010/03/rootsign-ietf77-qa.pdf] to date indicates that this will at worst be a very small proportion of Internet users.