Hacker News Reader

Without me having to deep dive through several RFCs... Is it a secure protocol, or is this BGP style we trusted everyone in the beginning and now have to layer security atop it?

You can sign update transactions with HMAC-SHA2. I don't believe there's anything in the way of preventing replays though.

Per a sibling comment, GSS has timestamps to prevent replays:

* https://en.wikipedia.org/wiki/TSIG

It can be secured with GSSAPI.

I don't disagree, but in the meantime, a handy CLI utility that can handle a bunch of APIs:

* https://github.com/AnalogJ/lexicon

This way you only have to write one set of boiler plate in case you use multiple providers (or want to change providers).

I'm probably overlooking it, but does this support dyndns, aka dyn.com, aka Oracle dyndns? I couldn't find that it does.

absolutely! it is so much easier to deal with!