On 11/08/2014 06:18, Andrew Sullivan wrote:
On Sun, Aug 10, 2014 at 05:35:03PM -0000, John Levine wrote:
As far as I can tell, we don't have a good word to describe what
DNSSEC does.
Nonsense. "This data was not tampered with while in transit from the
authoritative server to you." That's what it does.
What people are pointing out is that this is no better, and no worse,
than the seal on a snake oil bottle proving that the snake oil
has not been tampered with since it left the factory.
Unfortunately, the average user can easily confuse that with an
assurance that the snake oil will cure your illness. There isn't
much we can do to change that.
Brian