Anand Buddhdev (anandb) writes:
> >
> > But have you registered a domain under .KE ?
>
> I don't have any personal domains in .KE at the moment, but I was born
> and raised in Kenya, and still have family and friends there.
I totally understand, I live in Nairobi myself :)
> They have .KE domains. My inability to communicate with them, and their
> inability to communicate with me, using .KE domains, makes this issue rather
> important to me.
And to everyone who was affected as well, yes.
Hm, as I can see, resolution works - I think it's probably better
to have a functioning KE delegation, than a broken signed one.
I don't see issues *currently* with validation breaking, since
there is no DS.
> > The report is a service to the community, not an obligation.
>
> Yes, the report is a nice-to-have, rather than essential. The DS record,
> on the other hand, is not optional. KeNIC gave us the candy, and have
> now taken it away again.
I strongly disagree on this point. I understand the frustration, but
to be honest, it's KE's prerogative to decide when and if they want
to reitroduce a DS record. I've been to KENIC and they do good work
over there, but I think it would be a disservice to the Kenyan
community to hurry under pressure, submit a DS when they're not
quite ready to do so, and experience another failure. That would
certainly kill trust more than anything.
> > The fact that the delegation is broken is certainly something registrars
> > and customers here in Kenya can complain about, not us.
>
> I don't live in Kenya now, but why does that matter? I am affected by
> DNSSEC failure in .KE, and I can choose to voice an opinion about it.
Absolutely, but saying it's "not optional" in a public forum is
not super helpful to them. That's an opinion, too :)
Cheers,
Phil
