• interdimensionalmeme@lemmy.ml
    link
    fedilink
    English
    arrow-up
    1
    ·
    9 hours ago

    That makes me realize, what kind of country doesn’t cobtrol it’s dns space’s encryption certificates. That’s a major oversight.

    • DreamlandLividity@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      8 hours ago

      What? What do you mean “DNS space”? Classic DNS does not have any security, no encryption and no signatures.

      DNSSEC, which adds signatures, is based on TLDs, not any geography or country. And it is not yet enabled for most domains, though I guess it would be for google. But obviously EU does not control .com.

      And if you mean TLS certificates, those are a bit complicated and I already explained why forging those would be problematic and not work on Chrome, though it could be done.

      • interdimensionalmeme@lemmy.ml
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 hours ago

        Yes I mean tls certs as those control what dns records are considered valid. The Eu should control which tls are considered valid within its territory and that should be considetedpart of their security apparatus. It’s crazy irresponsible to have left that up to unaccountable private foreign entities. This is what would make it difficult to control their own independant version of the dns namespace.