Re: [dns-operations] Flush DNSSEC from Cache

[Viktor Dukhovni]

On Wed, Dec 18, 2019 at 07:06:56AM +, Jay, Tim wrote:

> Will you please flush adp.com from your caches if you are doing DNSSEC
> validation?

Are you able to share any information about why this might be necessary?

In the last two-plus years of doing daily DNSSEC/DANE surveys, including
all signed .com delegations, I've never run into DS records for adp.com.
Were DS RRs added prematurely in error in the last ~12 hours, and then
quickly removed?

-- 
Viktor.
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] Flush DNSSEC from Cache

[Warren Kumari]

On Wed, Dec 18, 2019 at 9:10 AM Jay, Tim via dns-operations
 wrote:
>
>
>
>
> -- Forwarded message --
> From: "Jay, Tim" 
> To: "dns-operations@lists.dns-oarc.net" 
> Cc:
> Bcc:
> Date: Wed, 18 Dec 2019 07:06:56 +
> Subject: Flush DNSSEC from Cache
>
> Hello DNSOPS,
>
>
>
> Will you please flush adp.com from your caches if you are doing DNSSEC 
> validation?
>
>
>
> I would greatly appreciate a reply if you have been able to flush your cache 
> succusfully.
>
>


Flushed from Google's 8.8.8.8 resolvers

Cloudflare provides a page at https://cloudflare-dns.com/purge-cache/
-- I clicked some buttons there, and so it should be flushed from
1.1.1.1 as well...


A few years back Joe Abley and I had written "A Mechanism for
Remote-Triggered DNS Cache Flushes (DNS FLUSH)"
(draft-jabley-dnsop-dns-flush-00), and "Requirements for a Mechanism
for Remote-Triggered DNS Cache Flushes"
(draft-jabley-dnsop-flush-reqs-00). I've also got a draft,
presentation and some PoC code for creating a "DNS exchange" (a
concept similar to an IXP, but for DNS). This would allow sharing of
zonefiles, and also the ability to request cache flushes through an
automated, authenticated system. Other projects got in the way, but
I've been meaning to get back to this sometime...

W


>
> Thank you,
>
>
>
> Tim Jay
>
> Domain Client Services Manager, MarkMonitor |  Clarivate Analytics
>
> Phone +1.208.685.1789 |  Fax +1.208.389.5771
>
> 3540 East Longwing Lane, Suite 300 |  Meridian, ID 83646 |  US
>
>
>
> Have feedback? Contact my supervisor directly at olga.bou...@markmonitor.com
>
>
>
> NOTE: All transactions with MarkMonitor are subject to our standard terms and 
> conditions set forth at https://www.markmonitor.com/legal/tc_dm.php or the 
> specific terms and conditions of your written agreement with MarkMonitor. If 
> you do not agree to be bound by these terms and conditions, please contact us 
> immediately to cancel your order - (800) 337-7520.  MarkMonitor’s proposed 
> prices and terms of service are highly confidential and proprietary to 
> MarkMonitor, and may only be used for your internal purchasing purposes.  
> This information may not be shared with any third parties, except as 
> necessary in connection with any legal action or proceeding.  If you do not 
> agree with these confidentiality obligations, please notify the sender by 
> return e-mail, and delete or destroy all copies of this email and any 
> attachments.
>
>
>
>
>
>
>
>
> -- Forwarded message --
> From: "Jay, Tim via dns-operations" 
> To: "dns-operations@lists.dns-oarc.net" 
> Cc:
> Bcc:
> Date: Wed, 18 Dec 2019 07:06:56 +
> Subject: [dns-operations] Flush DNSSEC from Cache
> ___
> dns-operations mailing list
> dns-operations@lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations



-- 
I don't think the execution is relevant when it was obviously a bad
idea in the first place.
This is like putting rabid weasels in your pants, and later expressing
regret at having chosen those particular rabid weasels and that pair
of pants.
   ---maf

___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

[dns-operations] Flush DNSSEC from Cache

[Jay, Tim via dns-operations]

--- Begin Message ---
Hello DNSOPS,

Will you please flush adp.com from your caches if you are doing DNSSEC 
validation?

I would greatly appreciate a reply if you have been able to flush your cache 
succusfully.

Thank you,

Tim Jay
Domain Client Services Manager, MarkMonitor |  
Clarivate Analytics
Phone +1.208.685.1789 |  Fax +1.208.389.5771
3540 East Longwing Lane, Suite 300 |  Meridian, ID 83646 |  US

Have feedback? Contact my supervisor directly at 
olga.bou...@markmonitor.com

NOTE: All transactions with MarkMonitor are subject to our standard terms and 
conditions set forth at https://www.markmonitor.com/legal/tc_dm.php or the 
specific terms and conditions of your written agreement with MarkMonitor. If 
you do not agree to be bound by these terms and conditions, please contact us 
immediately to cancel your order - (800) 337-7520.  MarkMonitor's proposed 
prices and terms of service are highly confidential and proprietary to 
MarkMonitor, and may only be used for your internal purchasing purposes.  This 
information may not be shared with any third parties, except as necessary in 
connection with any legal action or proceeding.  If you do not agree with these 
confidentiality obligations, please notify the sender by return e-mail, and 
delete or destroy all copies of this email and any attachments.


--- End Message ---
___
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations