[164303] in North American Network Operators' Group
Re: .nyc - here we go...
daemon@ATHENA.MIT.EDU (Rubens Kuhl)
Thu Jul 4 12:43:05 2013
In-Reply-To: <51D58E0A.6040103@elcsplace.com>
Date: Thu, 4 Jul 2013 13:42:32 -0300
From: Rubens Kuhl <rubensk@gmail.com>
To: Nanog <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Thu, Jul 4, 2013 at 12:00 PM, Ted Cooper
<ml-nanog090304q@elcsplace.com>wrote:
> On 03/07/13 11:12, Scott Weeks wrote:
> > "As of July 2, 2013, .nyc has been approved by ICANN as a
> > city-level top-level domain (TLD) for New York City"
>
> Do they have DNSSEC from inception? It would seem a sensible thing to do
> for a virgin TLD.
All new gTLDs are required to be DNSSEC-signed. The requirement only
applies to the parent zone, unless registry policy dictates otherwise, so
we can expect many more DS records in the root but a similar DS rate for
2LDs to other gTLDs, likely to be less than 1%:
http://scoreboard.verisignlabs.com/percent-trace.png
Rubens