[HN Gopher] DNSSEC KSK rollover breaks DNS resolution for .nz do...
       ___________________________________________________________________
        
       DNSSEC KSK rollover breaks DNS resolution for .nz domains
        
       Author : rjgray
       Score  : 27 points
       Date   : 2023-05-29 22:29 UTC (30 minutes ago)
        
 (HTM) web link (status.internetnz.nz)
 (TXT) w3m dump (status.internetnz.nz)
        
       | lucgagan wrote:
       | I hope the situation gets resolved swiftly, and lessons learned
       | from this incident can contribute to stronger and more reliable
       | DNSSEC practices in the future.
        
       | throwaway892238 wrote:
       | If a safety upgrade to driving a car made people crash their cars
       | more, you'd call that a bug. For DNS it's a feature called
       | DNSSEC.
        
         | gg-plz wrote:
         | if your browser ignored all certificate errors, I guess you'd
         | call that a feature?
        
           | [deleted]
        
         | josephcsible wrote:
         | Your analogy would only be valid for a bug that made
         | impersonating a site easier somehow, which this one didn't.
        
       | [deleted]
        
       ___________________________________________________________________
       (page generated 2023-05-29 23:00 UTC)