ICANN and NIST Announce Plans To Sign the DNS Root
jhutkd writes "On June 3rd, 2009, ICANN and NIST
announced formal plans to use DNSSEC to sign the DNS root zone by the end of 2009. This is a huge step forward for the deployment of DNSSEC."
← Back to Stories (view on slashdot.org)
The big problem with DNSSEC, if widely used, is that it prevents forgery of DNS responses. ISPs and internet cafes will not like this, since that means they can no longer forget DNS replies to missing domains or to force people through registration pages. I can see a *LOT* of push-back from having end-users using DNSSEC.
SPF support for most open source mail servers can be found at libspf2.