New answers tagged dnssec
(Yes, the question is old, but it deserves an answer.) Some rules for modern crypto: MD5 is dead 1024 bit RSA is dead SHA1 is dying Using an HMAC for DNSSEC makes no sense, an HMAC requires both parties to have access to the same secret; in the context of DNSSEC, this means clients could spoof the server, making it useless. There's a lot of algorithms ...
Top 50 recent answers are included