1. DNSSEC/against
DNSSEC はなぜダメなのか http://www.e-ontap.com/dns/criticism/
http://www.circleid.com/posts/070814_case_against_dnssec/
The Case Against DNSSEC
- Aug 14, 2007 10:03 AM PDT
By Ron Aitchison
1. SSL provides known and trusted security, DNSSEC is superfluous 2. DNSSEC is complex and potentially prone to errors 3. DNSSEC makes DoS attacks worse 4. DNSSEC does not solve the last mile problem