Hacker News Reader

Germany also got so high on Putin's gas that it turned off nuclear power plants. So yes, it's not trivial to deploy, but it makes sense to do so, especially on the long term, no?

View on HN

I think these are not really comparable observations. The point of calling out the .DE DNSSEC failure is that you'd reasonably expect the operators of a TLD to be expert at managing the DNS, and yet they failed to adequately manage DNSSEC; it speaks to the poor design of the protocol (and its associated tooling). It's not, like, a general observation about Germany itself.

... yet hundreds of other TLDs manage to do rollover without an incident of this magnitude.

I completely agree that the tooling is questionable, and that the protocol is meh, but in this case the monitoring noticed the problem yet humans did not notice (or get) the alert.

Reply on news.ycombinator.com