Viktor Dukhovni via Postfix-users <[email protected]> writes:

> On Sun, Feb 08, 2026 at 11:03:49AM -0800, Dan Mahoney via Postfix-users wrote:
>
>> Why could this be?  I guess we'll never know!  If only there was
>> someone at ISC you could ask.
>
> Sarcasm is likely not deserved in this case.
>
> It is not uncommon to look for guidance in the practices of well-known
> domains, on the assumption that perhaps they know what they're doing...
> This is even sometimes justified!  Sometimes the poster domain is ietf.org,
> but other domains also get to play that rôle.

With DANE, here are lists of domains i have researched:

- Postfix mailing domain (list.sys4.de)
- Viktor's domain (dukhovni.org)
- Postfix Author's domain (porcupine.org)
- SYS4 domain (sys4.de)
- ISC (isc.org)
- Googe Gmail (gmail.com)
- Debian Project (debian.org)
- gentoo.org; DANE-TA 2 1 1 example
- ... yada yada ...

> The DANE TLSA records of isc.org have been quite reliable, with just one
> mishap, that you might recall (ISC-Ops #99428), detected back on 18 April
> 2019.  I hope and expect that appropriate operational improvements were
> subsequently made, and have contributed to keeping the TLSA records
> correct for now almost seven years.  Congratulations and thanks on
> running a tight ship.

I love ISC too, thanks!


Sincerely,

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to