DNSSEC

Raised as a usability problem by 5 people on Hacker News over 3 years (2023–2025), in 4 threads.

People raised many different problems with DNSSEC, but no single problem has yet been raised by 3 people in 3 different months and threads.

Unreviewed issues were grouped by machine: Claude Haiku labelled each comment as a usability complaint, named what it's about and summed up the problem in a line, and a small model grouped similar problems. Nobody has checked them by hand. Expect mistakes.

The newest 5 complaints

Setting up DNSSEC is error-prone and turning it off later causes outages2025-09-01
DNSSEC is still relatively hard for people to use2024-08-02
DNSSEC and DANE are hard to use, with poor adoption and horrible usability2023-07-17
Hard to manage, so people struggle to keep it configured correctly2023-06-01
Operators can easily break domains by mishandling key rollovers, transfers, or HSM setup, making it hard for ordinary people to get right2023-06-01