Hacker News Reader

As an aside, the official "compression" algorithm is just unbelievable. DJB's comment in dns_packet.c is quite apt:

/* DNS should have used LZ77 instead of its own sophomoric compression algorithm. */

It has also been a historic source of both security flaws (BIND's problems with DNS compression were remote code execution flaws, not baroque policy violations in delegated subdomains) and interoperability failures (BIND has been unable to decide which record contents are compressable versus which ones need to remain canonical).

But yeah, the experts in this protocol should definitely be the ones to design an Internet-wide PKI.

Reply on news.ycombinator.com