Comments (3)
Note: It would be almost impossible to introduce such a hard requirement later on, which would lead to legacy handling of not-yet-secured sites, adding complexity and weakening security. The choice for/against DNSSEC should come soon and decisively.
Personally, I would consider mandatory DNSSEC a /huge/ improvement.
from tent.io.
The problem is that the vast majority of users (even the ones running their own servers) won't have access to name servers that support DNSSEC, let alone understand how to set it up.
from tent.io.
You would hope that BIND 9 is starting to become widespread :/
The good thing is, this could all be handled completely transparent to the user; Tent servers can use their 'own' implementation of a DNS recursive resolver instead of falling back to the one provided by the OS (caching is lost, however) to provide DNSSEC-enabled lookup. The dnsruby
gem, for example, works great in that regard, no matter which environment you are in. Example gist: https://gist.github.com/3504294, should output SECURE
.
The DNS servers would be another thing. For hosted platforms, running their own DNS server and a cronjob to update the signatures should not be a problem. For self-hosted platforms, their DNS needs to be stored somewhere anyway. A solution to that problem would solve the DNSSEC problem as well.
from tent.io.
Related Issues (20)
- Idea: allow profiles to be requested on the new_post endpoint
- How to handle attachments with identical digests on a single post
- What Content-Type to return on the attachment endpoint
- Allow the attachment endpoint to redirect to a CDN location
- Why is the attachment endpoint needed?
- Relationship post type fragment
- Posts feed pagination issue
- Use of Cache-Control can be difficult in browsers HOT 2
- Allow a "types" parameter on the mentions endpoint
- Proposal: rename app.id to app.post
- Proposal: omit urls for not supported endpoints in meta post
- Provide a Status Update HOT 3
- Notification Status
- Will tor connectivity be enforced? HOT 3
- Definition of profile sturcture HOT 2
- Finish documentation HOT 2
- Meta posts' profile.website having a duplicate option or as an array. HOT 1
- Transaction post type HOT 1
- Community Issues: How to address the barrier to entry with prospective users? HOT 10
- tent is dead! What's the reason? HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from tent.io.