cloudflare 为全部客户域名启用 dnssec(Secure DNS for Every Domain)
zho6 · 2015-11-12 19:46:43 +08:00 · 2408 次点击这是一个创建于 3304 天前的主题，其中的信息可能已经有所发展或是发生改变。
博客原文 https://blog.cloudflare.com/introducing-universal-dnssec/
目测了下 需要登入 cloudflare.com 手动开启 dnssec
DNSSEC protects against forged DNS answers. DNSSEC protected zones are digitally signed to ensure the DNS records received are identical to the DNS records published by the zone owner.
DNSSEC is pending while we wait for the DS to be added to your registrar. This usually takes ten minutes, but can take up to an hour.
总的来说 非常感谢 cloudflare 在基础安全作出的努力
目测了下 需要登入 cloudflare.com 手动开启 dnssec
DNSSEC protects against forged DNS answers. DNSSEC protected zones are digitally signed to ensure the DNS records received are identical to the DNS records published by the zone owner.
DNSSEC is pending while we wait for the DS to be added to your registrar. This usually takes ten minutes, but can take up to an hour.
总的来说 非常感谢 cloudflare 在基础安全作出的努力
2 条回复
 |
1
h0wardc 2015-11-12 22:42:10 +08:00
CloudFlare 好像真的可以解决以前很多有关于 DNSSEC 的 arguments..
[If DNSSEC is so useful, why is its deployment non-existent for top domains?]( http://security.stackexchange.com/questions/21121/if-dnssec-is-so-useful-why-is-its-deployment-non-existent-for-top-domains) [A Case Against DNSSEC]( https://lists.dns-oarc.net/pipermail/dns-operations/2007-April/001441.html) 想去 namecheap 玩一下才知道他们说了好几年到現在都还沒有支持.. 好想知道会不会有一天 gfw 反被墙回來 lol |
 |
2
Had 2015-11-13 14:59:53 +08:00
目前在用 Godaddy+Dyn ，感觉还可以。
|
Select Language