[dns-operations] Unplanned DLV zone outage on 2009-Apr-06
Hugo Salgado
hsalgado at nic.cl
Tue Apr 14 19:59:57 UTC 2009
Lutz Donnerhacke wrote:
> * Samuel Weiler wrote:
>> If the world had multiple useful DLV registries
>
> There are currently two of them calling themself "productive":
>
> dlv.isc.org:
> - aims to trustworthy: Validate on purpose
> - designed to demonstrate the technology
> - imports entries on explicit request and after a verification step
> - resolved the open problems with key rollovers and transitions to
> unsigned state in the last two months by introducting a web interface
>
> dnssec.iks-jena.de:
> - aims to fill the gaps in the hierarchy: Validate if possible
> - designed to run on auto-pilot
> - imports entries by crawling and user input
> - maintains the entries using RFC 5011
>
> If you are running a validating resolver, I strongly recommend you to slave
> the DLV you are referering to. All DLVs allow AXFR exactly for this purpose.
>
> There are other DLVs out there, i.e. dlv.vulcano.cl.
hey! that's my sandbox zone. it's just a test, preparing myself
to bypass the unforeseeable .cl signed zone ;)
by the way, here's another production dlv repo:
http://secspider.cs.ucla.edu/faq.html#dlv
hugo
More information about the dns-operations
mailing list