During the DNSSEC Summit on 21 Feb at APRICOT-APAN 2011, CNNIC representative (forget his name) said there are many problems with DNSSEC such as extra processing power, extra bandwidth, poor efficiency, frequent updates plus China does not want to use foreign software for signing .cn zones as it is a national security matter.
The guy did not tell the main reason behind. DNSSEC will make China Great Firewall (GFW) unworkable in poisoning domain names as a way of blocking websites.
I tend to think DNSSEC will not be implemented in China as long as GFW employs cache poisoning.
No comments:
Post a Comment