Re: [DNSOP] Waiting for DNSSEC...

2018-11-30 Thread Petr Špaček
On 05. 11. 18 19:30, Tony Finch wrote: > Mukund Sivaraman wrote: >> On Fri, Nov 02, 2018 at 02:30:15PM -0400, Viktor Dukhovni wrote: >>> >>> To move DNSSEC adoption higher, CDS/CDNSKEY/... need to be supported >>> by most registries and the signing and key rollover tooling needs >>> to become

Re: [DNSOP] Waiting for DNSSEC...

2018-11-05 Thread Tony Finch
Mukund Sivaraman wrote: > On Fri, Nov 02, 2018 at 02:30:15PM -0400, Viktor Dukhovni wrote: > > > > To move DNSSEC adoption higher, CDS/CDNSKEY/... need to be supported > > by most registries and the signing and key rollover tooling needs > > to become less brittle and more user-friendly. Yes! >

Re: [DNSOP] Waiting for DNSSEC...

2018-11-02 Thread Mukund Sivaraman
On Fri, Nov 02, 2018 at 02:30:15PM -0400, Viktor Dukhovni wrote: > [ Was: Fundamental ANAME problems > Dropped In-Reply-To:, to ensure a new thread. ] > > On Fri, Nov 02, 2018 at 06:28:52PM +0100, Måns Nilsson wrote: > > > > I'll defer to other people, but it seems to me that anything that

[DNSOP] Waiting for DNSSEC...

2018-11-02 Thread Viktor Dukhovni
[ Was: Fundamental ANAME problems Dropped In-Reply-To:, to ensure a new thread. ] On Fri, Nov 02, 2018 at 06:28:52PM +0100, Måns Nilsson wrote: > > I'll defer to other people, but it seems to me that anything that depends on > > recursive DNS servers being updated isn't a realistic solution.