Apparently, #RIPE76 takes place in a very dangerous city: https://twitter.com/ripemeeting/status/996687632133427200
Best test :-) 6.5 M TCP simultaneous connections to the resolver (Linux and Unbound still work). #RIPE76
Executive summary: DNS over TCP works, and scales. Just buy some hardware. #RIPE76
Willem Toroop "Who Needs Reasons, When You've Got Heroes?"
Do we need #DNSSEC when we have #TLS? (Executive summary: yes, for instance for redirections - SRV or MX, where TLS does not provide end-to-end security. And of course the biggest flaw of TLS is the CAs, something that DNSSEC+DANE solves.)
Vive les gougères ! mnt-by: @yapret @papaeng89