Re: [Dnssec-deployment] grace period (was Re: domain outage incident - redirected email attempts thwarted by DNSSEC)

2015-09-30 Thread Stephane Bortzmeyer
On Tue, Sep 29, 2015 at 05:54:54PM +0200, Florian Weimer wrote a message of 12 lines which said: > It's difficult to cause immediate mail bounces without running an MX > host for the domain in question. Without immediate bounces, the > issue might not be recognized in

Re: [Dnssec-deployment] grace period (was Re: domain outage incident - redirected email attempts thwarted by DNSSEC)

2015-09-29 Thread Mukund Sivaraman
Hi Andrew On Tue, Sep 29, 2015 at 11:27:48AM -0400, Andrew Sullivan wrote: > On Tue, Sep 29, 2015 at 08:41:05PM +0530, Mukund Sivaraman wrote: > > directed DNS to their nameserver and was serving records (how is the > > registrar permitted to control the domain except disabling it, when it > > is

Re: [Dnssec-deployment] grace period (was Re: domain outage incident - redirected email attempts thwarted by DNSSEC)

2015-09-29 Thread Andrew Sullivan
On Tue, Sep 29, 2015 at 09:02:04PM +0530, Mukund Sivaraman wrote: > What I had asked above was: except disabling it (i.e., > disrupting/denying access), how is the registrar permitted to control > the domain (redirecting to their NS to serve A records, which is > nefarious)? It's not nefarious.