Stéphane Bortzmeyer

"I think i should be able to come up with something that improves caching, reduces server load and eliminates some major security gaps while still keeping the decentralized aspect." (He talks about replacing the #DNS …)

(This was in a comment to https://blog.apnic.net/2026/02/25/towards-an-industry-best-practice-for-dnssec-automation/)

Will he have more success than the guy who claimed he could rewrite curl in one week-end?

Towards an industry best practice for DNSSEC automation | APNIC Blog

Guest Post: DNSSEC adoption, while steadily rising, is still low after 20 years. Why care about DNSSEC adoption anyway?

APNIC Blog
Feb 28 at 1:58pmWeb
Show threadRyan BolgerFeb 28
@bortzmeyer Maybe one of those crypto bros who think adding blockchain will solve everything.
Show threadMarcin CieślakFeb 28
@rmbolger @bortzmeyer maybe, but setting things up is horribly complicated. It takes way too many steps to set up a decent domain name zone. (Only email is worse and that includes DNS tricks, too). Today as I bought a fresh name, I was scratching my head about adding DS record in an over complicated web interface only to figure out I should stop using salting, reduce the number of hashing rounds and while am I here replace the algorithm. #nsec3 #dnssec