On Thu, Nov 20, 2014 at 09:29:02AM +0100, Marco Davids (SIDN) wrote:
> In particular TransIP is a bit of a challenge, because they run their
> own DNS-software and feel no rush to fix this issue. But rest assured
> that we will keep on trying to have them improve things.
At this point the "feel no rush" attitude will cause loss of email
between SMTP with DANE early adopters to transip sites that employ
wildcard records. They really need to get off their rear-ends and
fix the problem.
Otherwise, I may need to develop a new unbound feature that considers
a zone insecure if all its NS records lie in a given blacklisted
domain.
I don't suppose it is possible to pressure transip with a threat
of removal of the problem DS records from the '.nl' registry by
say 6 months from now if the problem is not addressed?
--
Viktor.
_______________________________________________
dane mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dane
