[113162] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Register.com DNS hosting issues

daemon@ATHENA.MIT.EDU (Florian Weimer)
Sat Apr 4 19:42:50 2009

From: Florian Weimer <fw@deneb.enyo.de>
To: Randy Bush <randy@psg.com>
Date: Sun, 05 Apr 2009 01:40:42 +0200
In-Reply-To: <m2skkoatvz.wl%randy@psg.com> (Randy Bush's message of "Sun, 05
	Apr 2009 08:20:16 +0900")
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

* Randy Bush:

>> But looking back at incidents such as the Zonelabs/Abovenet issue,
>> your advice is correct for the network we have today.
>
> as that rfc is over a decade old, i am not optimistic that change is
> neigh <sigh>.

DNSSEC obscures quite a few failures which can hit secondaries.  I
think it changes the cost/benefit ratio of additional name service
somewhat.  Without DNSSEC, it's just another party who can redirect
your traffic to Elbonia, so I understand if folks are quite
conservative about it.


home help back first fref pref prev next nref lref last post