On Tue, Sep 29, 2015 at 10:59:15AM -0400, Paul Wouters wrote: > So, my emails to this person were not delivered to the rogue MX servers > because both he and I deployed DNSSEC.
+1
Another similar example: gimp.org expired in the second week of August
and entered the grace period. At this time, the registrar conveniently
directed DNS to their nameserver and was serving records (how is the
registrar permitted to control the domain except disabling it, when it
is in grace period?). DS record at parent held and helped, at least for
those who were using validating resolvers.
Mukund
pgp4QW3Bsqwco.pgp
Description: PGP signature
