[Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

[Dave Taht]

On Wed, Apr 9, 2014 at 10:29 AM, Simon Kelley <simon at thekelleys.org.uk> wrote:
> On 09/04/14 15:51, Dave Taht wrote:
>
>>
>> My heart bleeds for the openssl folk and openssl derived application users
>> right now. More investment into creating, maintaining and improving
>> core crypto libraries is desperately needed to hold our civilization together.
>>
>
> +1
>
> Don't underestimate the contribution of all the people who take
> responsibility for the software that runs as root, or exposed to the
> net, on your machines. It's something I have nightmares about.

+10.

:empathy waves:

In my case I merely have thousands of users dependent on the OS I create.
I can't push an update to them, and can only update the most current
version of the code to include support (which I did about 2 hours after
the disclosure), and hope people on my mailing list are paying
attention.

millions or billions of users would suck harder.

and I still have several internet facing machines left to fix,
and certs to recreate and redistribute.

I would have preferred the have spent my week doing something else.

The financial cost in patching this hole is nearly incalculatable,
and the cost of having had it, or leaving it unpatched, is nearly infinite.

https://www.youtube.com/watch?v=_y36fG2Oba0

The cost of prevention is slight, in comparison.

>
> Simon.
>
>
> _______________________________________________
> Dnsmasq-discuss mailing list
> Dnsmasq-discuss at lists.thekelleys.org.uk
> http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss



-- 
Dave Täht

NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article