[dns-operations] Racing to DNSSEC was Re: Online DNSSEC debugging tool now availalbe

Edward Lewis Ed.Lewis at neustar.biz
Sun Jul 18 15:37:27 UTC 2010


At 8:45 +0600 7/18/10, Randy Bush wrote:
>odd that the .org registry, after a year+ of marketing noise, seems not
>to have registered their DS in time under well documented procedure.

What do you mean by "in time?"  There was no discount on transactions 
before July 15th.

I can think of a number of reasons why not to have the DS record in 
the root zone right now.

There's a long way to go until DNSSEC is deployed and really making 
an impact.  While the work to bring up the root zone is significant, 
it is still a enabling effort that eventually get enterprises to 
generate the attestations and get ISPs to depend on the validation of 
the attestations.

So I don't see a reason to rush.
-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis
NeuStar                    You can leave a voice message at +1-571-434-5468

Spouses, like Internet protocols, lack necessary troubleshooting tools. Sigh.



More information about the dns-operations mailing list