Re: [dns-operations] DNSViz please support DNSSEC algorithm Ed25519 (15)

[Arsen STASIC]

Hi Matt,

* Matthew Pounsett  [2021-01-19 14:59 (-0500)]:

On Dec 30, 2020, at 06:42, Arsen STASIC  wrote:

Dear DNS-OARC,

Could you please support DNSSEC algorithm Ed25519 (15)?
I think Casey Deccio has already added support for Ed25519. [0]


Hi Arsen.

First, it’s generally better to address mail to OARC to an OARC address — we 
usually point people toward ad...@dns-oarc.net for general support issues.  
There’s also a feedback link on the DNSViz site itself (“Questions and 
Comments”) which gets prompt replies.  While we watch the public lists, it’s 
not really an official support forum. :)I’m still a bit backed up on 
mailing lists after the holiday break, which is why I’ve been a bit slow to 
find/reply to this.


I wrote to the list because DNSViz was multiple times discussed on the list. I 
didn't head ad...@dns-oarc.net on my radar for this issue. I try to remember 
for the future :)


The DNSViz code does support ED25519, but (as Casey explained) the problem on 
the site is the underlying OpenSSL library.  That host is already on the list 
for a major overhaul, which would include an OS update, and I’m expecting to 
get to that within the next couple of weeks.


I am really looking forward to this update.

I an highly appreciate OARC's and Casey's effort for this really useful service!

cheers
-arsen
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] DNSViz please support DNSSEC algorithm Ed25519 (15)

[Matthew Pounsett]

> On Dec 30, 2020, at 06:42, Arsen STASIC  wrote:
> 
> Dear DNS-OARC,
> 
> Could you please support DNSSEC algorithm Ed25519 (15)?
> I think Casey Deccio has already added support for Ed25519. [0]

Hi Arsen.

First, it’s generally better to address mail to OARC to an OARC address — we 
usually point people toward ad...@dns-oarc.net for general support issues.  
There’s also a feedback link on the DNSViz site itself (“Questions and 
Comments”) which gets prompt replies.  While we watch the public lists, it’s 
not really an official support forum. :)I’m still a bit backed up on 
mailing lists after the holiday break, which is why I’ve been a bit slow to 
find/reply to this.

The DNSViz code does support ED25519, but (as Casey explained) the problem on 
the site is the underlying OpenSSL library.  That host is already on the list 
for a major overhaul, which would include an OS update, and I’m expecting to 
get to that within the next couple of weeks.

Matt Pounsett
DNS-OARC Systems Engineering





signature.asc
Description: Message signed with OpenPGP
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] DNSViz please support DNSSEC algorithm Ed25519 (15)

[Jerry Lundström]

Hi Arsen,

On 2021-01-04 09:30, Arsen STASIC wrote:
> Hi Jerry,
> 
> * Jerry Lundström  [2021-01-04 09:19 (+0100)]:
>> On 2020-12-30 12:42, Arsen STASIC wrote:
>>> Could you please support DNSSEC algorithm Ed25519 (15)?
>>> I think Casey Deccio has already added support for Ed25519. [0]
>     ^

Ah, I miss read.

> I think the code is ready (see [0]).
> Now it's on DNS-OARC to git pull and run it ;-)

I believe Casey has access to push new code himself to the site but if
it's new code then maybe there is a reason it's not up yet, besides that
it's still holiday season.

Cheers,
Jerry
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] DNSViz please support DNSSEC algorithm Ed25519 (15)

[Arsen STASIC]

Hi Jerry,

* Jerry Lundström  [2021-01-04 09:19 (+0100)]:

On 2020-12-30 12:42, Arsen STASIC wrote:

Could you please support DNSSEC algorithm Ed25519 (15)?
I think Casey Deccio has already added support for Ed25519. [0]

^

[0] 
https://github.com/dnsviz/dnsviz/commit/375941d1f2c5cb3ad5ae76138cf9887971b611cf

I think the code is ready (see [0]).
Now it's on DNS-OARC to git pull and run it ;-)

Thank you Casey Deccio for the code and DNS-OARC for hosting it! This is really 
a useful service.


While we (DNS-OARC) host and operate the public instance of DNSViz, the
code is still owned and managed by Casey Deccio so I'd suggest you
create an issue on DNSViz's GitHub:

 


cheers,
-arsen
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] DNSViz please support DNSSEC algorithm Ed25519 (15)

[Jerry Lundström]

Hi Arsen,

On 2020-12-30 12:42, Arsen STASIC wrote:
> Could you please support DNSSEC algorithm Ed25519 (15)?
> I think Casey Deccio has already added support for Ed25519. [0]

While we (DNS-OARC) host and operate the public instance of DNSViz, the
code is still owned and managed by Casey Deccio so I'd suggest you
create an issue on DNSViz's GitHub:

  

Also, as DNSViz is a open source project, you are more then welcome to
help develop this support. We can also help with managing the funds for
such a development, please see Funding Development at
.

Cheers,
Jerry
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

[dns-operations] DNSViz please support DNSSEC algorithm Ed25519 (15)

[Arsen STASIC]

Dear DNS-OARC,

Could you please support DNSSEC algorithm Ed25519 (15)?
I think Casey Deccio has already added support for Ed25519. [0]

RFC 8624 lists Ed25519 as RECOMMENDED [1].

Verisign's dnssec-analyzer already supports DNSSEC algorithm Ed25519 (15) [2].

It would be really handy to have a second tool to check DNSSEC for correctness.

cheers,
-arsen

[0] 
https://github.com/dnsviz/dnsviz/commit/375941d1f2c5cb3ad5ae76138cf9887971b611cf
[1] https://tools.ietf.org/html/rfc8624#section-3.1
[2] https://dnssec-analyzer.verisignlabs.com/
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations