[as112-ops] DNSSEC?

[Shane Kerr]

Marco,

On Fri, 2010-01-08 at 08:37 +0100, Marco Davids wrote:
> Hi there,
> 
> Happy New Year everyone.
> 
> I was wondering: are there any plans to deploy DNSSEC on the AS112
> served zones in the future, including 'hostname.as112.net' itself?

Not AFAIK.

> (would it have added value to do so?)

It might break something somewhere, causing a DNS administrator to
review their setup and properly configure their reverse DNS. That seems
like added value! :)

Seriously though, I don't see much added value, and a number of
problems. For example, unless all servers support DNSSEC, then some
clients will get a signed result and some will not. Also, someone would
need to take responsibility for signing the zone (IANA?), and we would
need to define a way to distribute it.

--
Shane