[127842] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Root Zone DNSSEC Deployment Technical Status Update

daemon@ATHENA.MIT.EDU (Leo Bicknell)
Fri Jul 16 10:53:45 2010

Date: Fri, 16 Jul 2010 07:53:15 -0700
From: Leo Bicknell <bicknell@ufp.org>
To: nanog@nanog.org
Mail-Followup-To: nanog@nanog.org
In-Reply-To: <E1OZm0p-000FbS-Nj@monster.hopcount.ca>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


--bg08WKrSYDhXBjb5
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

In a message written on Fri, Jul 16, 2010 at 02:35:39PM +0000, Joe Abley wr=
ote:
> The transition from Deliberately-Unvalidatable Root Zone (DURZ) to
> production signed root zone took place on 2010-07-15 at 2050 UTC. The
> first full production signed root zone had SOA serial 2010071501. There
> have been no reported harmful effects.  The root zone trust anchor can
> be found at <https://data.iana.org/root-anchors/>.

Perhaps you could explain why the keys are being made available in
formats that, as far as I can tell, no nameserver software on the
planet uses?  Pretty much 100% of the users will need a conversion
from one of the 6 formats you provided, when you could have provided
6 example configs for the 6 most popular nameserver packages and
covered 99% of the users with cut and paste.

--=20
       Leo Bicknell - bicknell@ufp.org - CCIE 3440
        PGP keys at http://www.ufp.org/~bicknell/

--bg08WKrSYDhXBjb5
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.13 (FreeBSD)
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=gDON
-----END PGP SIGNATURE-----

--bg08WKrSYDhXBjb5--


home help back first fref pref prev next nref lref last post