cloudflare 为全部客户域名启用 dnssec(Secure DNS for Every Domain)

This topic created in 3860 days ago, the information mentioned may be changed or developed.

博客原文 https://blog.cloudflare.com/introducing-universal-dnssec/

目测了下需要登入 cloudflare.com 手动开启 dnssec

DNSSEC protects against forged DNS answers. DNSSEC protected zones are digitally signed to ensure the DNS records received are identical to the DNS records published by the zone owner.
DNSSEC is pending while we wait for the DS to be added to your registrar. This usually takes ten minutes, but can take up to an hour.

总的来说非常感谢 cloudflare 在基础安全作出的努力

DNSSEC

DNS

Cloudflare

records

2 replies

h0wardc

Nov 12, 2015

CloudFlare 好像真的可以解决以前很多有关于 DNSSEC 的 arguments..
[If DNSSEC is so useful, why is its deployment non-existent for top domains?]( http://security.stackexchange.com/questions/21121/if-dnssec-is-so-useful-why-is-its-deployment-non-existent-for-top-domains)
[A Case Against DNSSEC]( https://lists.dns-oarc.net/pipermail/dns-operations/2007-April/001441.html)

想去 namecheap 玩一下才知道他们说了好几年到現在都还沒有支持..
好想知道会不会有一天 gfw 反被墙回來 lol

Had

Nov 13, 2015

目前在用 Godaddy+Dyn ，感觉还可以。