cloudflare 为全部客户域名启用 dnssec(Secure DNS for Every Domain)

[zho6]

博客原文 https://blog.cloudflare.com/introducing-universal-dnssec/

目测了下 需要登入 cloudflare.com 手动开启 dnssec

DNSSEC protects against forged DNS answers. DNSSEC protected zones are digitally signed to ensure the DNS records received are identical to the DNS records published by the zone owner.
DNSSEC is pending while we wait for the DS to be added to your registrar. This usually takes ten minutes, but can take up to an hour.

总的来说 非常感谢 cloudflare 在基础安全作出的努力

[h0wardc]

CloudFlare 好像真的可以解决以前很多有关于 DNSSEC 的 arguments..
[If DNSSEC is so useful, why is its deployment non-existent for top domains?]( http://security.stackexchange.com/questions/21121/if-dnssec-is-so-useful-why-is-its-deployment-non-existent-for-top-domains)
[A Case Against DNSSEC]( https://lists.dns-oarc.net/pipermail/dns-operations/2007-April/001441.html)

想去 namecheap 玩一下才知道他们说了好几年到現在都还沒有支持..
好想知道会不会有一天 gfw 反被墙回來 lol

[Had]

目前在用 Godaddy+Dyn ，感觉还可以。