On Tue, Sep 29, 2015 at 10:59:15AM -0400,
Paul Wouters wrote
a message of 32 lines which said:
> What made things worse is that said Registrar took over the domains
> and is running those zones on their DNS servers, including an MX
> record that points to an actual mailserver.
On Tue, Sep 29, 2015 at 10:59:15AM -0400, Paul Wouters wrote:
> So, my emails to this person were not delivered to the rogue MX servers
> because both he and I deployed DNSSEC.
+1
Another similar example: gimp.org expired in the second week of August
and entered the grace period. At this time,
Paul Wouters writes:
> However, they did not modify the DS records after taking over the NS
> records and MX/A records.
Sadly though, they could have.