Aug
09
For a paper I’m writing on state-of-the-art cryptography and applications of cryptography I’ve drawn a picture of the complete trust chain required to validate the answer to a query for www.surfdnssec.org
(which is in one of our test domains and is a CNAME pointing to this blog). It really drives home how complex DNSSEC can be in a single picture…
10/09/2010 at 22:24
Thanks for the picture, good summary.