> On Thu, Jun 25, 2026 at 07:29:55PM +0000, Andy Smith via mailop wrote:
[snip]
> > Ultimately if I come up with something I will be putting it into
> > monitoring so that our customer can say, "I set up DANE for mail to
> > some.example.com" and we can say "our monitoring thinks this is done
> > correctly (or not)".
> >
> > Sadly I no longer have a real-world example of this failure mode as they
> > have fixed it! Guess I can try to make one...
>
> There are many more, one persistent example is "argeweb.com":
>
> https://stats.dnssec-tools.org/explore/?argeweb.com
Just in case anyone is interested in seeing some examples of DNSSEC
configurations that pass all the tests cited here, Debian and NetBSD
both serve as reasonable references:
https://stats.dnssec-tools.org/explore/?debian.org
https://stats.dnssec-tools.org/explore/?netbsd.org
(Hopefully this is helpful to anyone who's working on this.)
--
Postmaster - [email protected]
Randolf Richardson, CNA - [email protected]
Inter-Corporate Computer & Network Services, Inc.
Vancouver, Beautiful British Columbia, Canada
https://www.inter-corporate.com/
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
