isaac Mao's Library tagged IGF →  View Popular

The Domain Name System (DNS) has been with us for a long time, turning host
and domain names into IP addresses. Along the way, numerous flaws have
been found in the protocol, including last year's Kaminsky DNS flaw, which just
added to the clamor to see DNS replaced. But, DNS still hasn't gone away,
and doesn't
look like it will anytime soon, at least partially because its replacement,
DNSSEC, doesn't really resolve all of
the problems, and it creates some
of its own. A proposal by Daniel J. Bernstein (aka djb), called DNSCurve, has some interesting features that
might make it a viable alternative to DNS and DNSSEC—perhaps one that
can be widely
adopted.