Good news, I think a large reason for DNSSEC's slow adaptation is that it's fairly time-consuming to use.
If it can be made easier with no or little loss of security, then Kaminsky has done the world of DNS yet another favor.
__________________
UNIX was not designed to stop you from doing stupid things, because that would also stop you from doing clever things.
|