1. DNSSEC/against

DNSSEC はなぜダメなのか http://www.e-ontap.com/dns/criticism/


http://www.circleid.com/posts/070814_case_against_dnssec/

The Case Against DNSSEC

By Ron Aitchison

1. SSL provides known and trusted security, DNSSEC is superfluous
2. DNSSEC is complex and potentially prone to errors
3. DNSSEC makes DoS attacks worse
4. DNSSEC does not solve the last mile problem