[dns-operations] DNSSEC misconfiguration

[Tony Finch]

On 30 Jul 2010, at 16:26, Carlos Vicente <cvicente at network-services.uoregon.edu> wrote:
> 
> We enabled validation in our campus resolvers in 02/2009. We've actually
> had very few reports from users. 

We have separate resolvers dedicated to our mail servers on which I enabled validation a couple of months ago. There have been no noticeable problems. (We don't talk to .gov sites that much!)

What has caused problems that users notice is qmail's DNS resolution bugs which make it unable to cope with our signed zone.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/


> 
> cv
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.14 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> 
> iD8DBQFMUu8sDADXcoYj2ZwRAizuAJ9wZQclUts3f1s9Fqfs75bl8rnYAgCfRMqx
> X+4gE0FuwniKXoC7mYYFFXo=
> =VED8
> -----END PGP SIGNATURE-----
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations