--- Begin Message ---
I’m checking internally what ours does, but it’s not a “simple” binary question.
We did have it turned on in the past, but doing so meant we couldn’t get email
from several organisations we work with as their DNSSEC setup was broken. And
of course it took time to realise that we weren’t getting those emails.
Regards
Michele
--
Mr Michele Neylon
Blacknight Solutions
Hosting, Colocation & Domains
https://www.blacknight.com/
https://blacknight.blog/
Intl. +353 (0) 59 9183072
Direct Dial: +353 (0)59 9183090
Personal blog: https://michele.blog/
Some thoughts: https://ceo.hosting/
-------------------------------
Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty
Road,Graiguecullen,Carlow,R93 X265,Ireland Company No.: 370845
From: dns-operations <[email protected]> on behalf of Peter
Thomassen <[email protected]>
Date: Monday, 21 March 2022 at 14:50
To: [email protected] <[email protected]>
Subject: Re: [dns-operations] Survey on DNS resolver operations and DNSSEC
[EXTERNAL EMAIL] Please use caution when opening attachments from unrecognised
sources.
On 3/21/22 13:19, Bill Woodcock wrote:
> The alternative to DNSSEC validation is man-in-the-middle compromises. We
> wouldn’t be doing DNSSEC validation if it caused more workload than
> man-in-the-middle compromises. Therefore the increased workload is negative,
> not positive.
Is that (economic) argument all there is to it? -- If so, wouldn't one expect
all resolver operators to do DNSSEC validation? (Validation prevalence is far
from 100%.)
Best,
Peter
--
Like our community service? 💛
Please consider donating at
https://desec.io/
deSEC e.V.
Kyffhäuserstr. 5
10781 Berlin
Germany
Vorstandsvorsitz: Nils Wisiol
Registergericht: AG Berlin (Charlottenburg) VR 37525
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
--- End Message ---
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
