nanog mailing list archives

Re: DNSSEC?

From: Chris Adams <cma () cmadams net>
Date: Fri, 11 Apr 2014 14:25:29 -0500

Once upon a time, Barry Shein <bzs () world std com> said:

So, DNSSEC is also compromised by this heartbleed bug, right?


No, wrong.  The OpenSSL bug involves an extension to the TLS protocol
called "heartbeat" (basically like a TCP or PPP keepalive).

DNSSEC does not use TLS (or any other kind of transport encryption).
-- 
Chris Adams <cma () cmadams net>

Current thread:

DNSSEC? Barry Shein (Apr 11)
- Re: DNSSEC? Doug Barton (Apr 11)
  - Re: DNSSEC? Barry Shein (Apr 11)
    - Re: DNSSEC? Christopher Morrow (Apr 11)
- Re: DNSSEC? Bill Woodcock (Apr 11)
- Re: DNSSEC? Chris Adams (Apr 11)
  - Re: DNSSEC? Carsten Bormann (Apr 11)
    - Re: DNSSEC? Matt Palmer (Apr 11)
    - Re: DNSSEC? Robert Drake (Apr 11)
    - Re: DNSSEC? Mark Andrews (Apr 11)
    - Re: DNSSEC? Jimmy Hess (Apr 11)
    - Re: DNSSEC? Mark Andrews (Apr 11)
    - Re: DNSSEC? shawn wilson (Apr 12)
    - Re: DNSSEC? Michael Thomas (Apr 12)
    - Re: DNSSEC? Jimmy Hess (Apr 12)
    - Re: DNSSEC? Michael Thomas (Apr 12)