Join Nostr
2025-06-16 13:30:50 UTC

famfo :frogchamp: on Nostr: I once again want to voice my anger and disappointment at certain registrars and TLD ...

I once again want to voice my anger and disappointment at certain registrars and TLD delegations: DNSSEC keys with the algorithms 15 (ed25519) and 16 (ed448) are standardised and all modern software can do signing and validation on them. The DS record only needs to hold the algorithm and public key, so there is no need for specialized handling there to accommodate these keys.

Yet some registrars and delegations still refuse anything that doesn't smell like RSA or EcDSA. Why.