[dns-operations] Statement: Issues using BIND 9.4 & 9.5 with DLV and certain DNSSEC-signed zones

[Eric Osterweil]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Apr 25, 2009, at 4:40 PM, Chris Thompson wrote:

> On Apr 25 2009, Florian Weimer wrote:
>
>> * Eric Osterweil:
>>
>>> We track 35 DNSSEC gov zones at SecSpider.  We also track the gov   
>>> island as consisting of 9 "production" zones:
>>> 	http://secspider.cs.ucla.edu/islands.html
>>
>> So there are already 4 (soon 5) signed delegations in .gov you know
>> about?  (pmf.gov is the secure zone I could find.)
>
> There are also signed DS records in .gov for at least
>
> chcoc.gov.
> chicagoinfo.gov.
> dnsops.gov.
> dotgov.gov.
> fegli.gov.
> workingforamerica.gov.
>
> (Thanks to Eric for the hints.)

My pleasure.

>
>
> BTW, thanks to Edward Lewis (offline), I'll correct my "very roughly
> half" to "very roughly a quarter" - there are probably around 5000
> delegations from .gov in all.

If people know of more signed gov zones (or any signed zones for that  
matter), could they please submit them to SecSpider so we can assess  
and track DNSSEC's deployment growth?

Thanks a lot! :)

Eric
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (Darwin)

iEYEARECAAYFAknzmRoACgkQK/tq6CJjZQI8MgCffk2huc0BaOoXjxjLmmCgKc9u
Z7EAnAxQEl6S/N2UwKfTrxVwy+0WaMTc
=DcVn
-----END PGP SIGNATURE-----