Oddbean new post about | logout
▲ ▼
benthecarman | 9 months ago (raw) | root | parent | reply | flag 
 I have dns sec enabled for benthecarman.com but it tells me unsupported algo?

Using namecheap if that helps
▲ ▼
matt | 9 months ago (raw) | root | parent | reply | flag +2 
 lol namecheap is “securing” it using SHA-1. I guess I could implement it, but…. Come on.
▲ ▼
mainvolume | 9 months ago (raw) | root | parent | reply | flag 
 🤷
▲ ▼
benthecarman | 9 months ago (raw) | root | parent | reply | flag 
 Yikes lol
▲ ▼
matt | 9 months ago (raw) | root | parent | reply | flag +1 
 I meannnnnn it’s actually probably mostly fine. There’s some analysis basically concluding the known attacks against SHA-1 don’t really apply to DNSSEC, but, yea, not great.