Re: [Dnssec-deployment] domain outage incident - redirected email attempts thwarted by DNSSEC

2015-09-30 Thread Stephane Bortzmeyer
On Tue, Sep 29, 2015 at 10:59:15AM -0400, Paul Wouters wrote a message of 32 lines which said: > What made things worse is that said Registrar took over the domains > and is running those zones on their DNS servers, including an MX > record that points to an actual mailserver.

Re: [Dnssec-deployment] domain outage incident - redirected email attempts thwarted by DNSSEC

2015-09-29 Thread Mukund Sivaraman
On Tue, Sep 29, 2015 at 10:59:15AM -0400, Paul Wouters wrote: > So, my emails to this person were not delivered to the rogue MX servers > because both he and I deployed DNSSEC. +1 Another similar example: gimp.org expired in the second week of August and entered the grace period. At this time,

Re: [Dnssec-deployment] domain outage incident - redirected email attempts thwarted by DNSSEC

2015-09-29 Thread Dave Lawrence
Paul Wouters writes: > However, they did not modify the DS records after taking over the NS > records and MX/A records. Sadly though, they could have.