[dns-operations] [DNSSEC in .FR] Study and action plan following the incident with validating resolvers on 12 February 2011

[Mark Andrews]

In message <05B243F724B2284986522B6ACD0504D7E5D1FE7466 at EXVPMBX100-1.exc.icann.o
rg>, Richard Lamb writes:
> Thank you very much for this detailed incident report.  It is an excellent ex
> ample of the transparency and honesty we need to keep DNSSEC adoption on trac
> k.
> 
> -Rick

FYI

3020.   [bug]           auto-dnssec failed to correctly update the zone when
                        changing the DNSKEY RRset. [RT #23232]


BIND 9.8.0 contain this fix and we are finalising the release notes at the
moment.

> > -----Original Message-----
> > From: dns-operations-bounces at mail.dns-oarc.net [mailto:dns-operations-
> > bounces at mail.dns-oarc.net] On Behalf Of Stephane Bortzmeyer
> > Sent: Saturday, February 19, 2011 5:06 AM
> > To: dns-operations at mail.dns-oarc.net
> > Subject: [dns-operations] [DNSSEC in .FR] Study and action plan
> > following the incident with validating resolvers on 12 February 2011
> > 
> > http://operations.afnic.fr/en/2011/02/18/study-and-action-plan-
> > following-the-incident-with-validating-resolvers-on-12-february-
> > 2011.html
> > 
> > On Saturday, 12 February 2011, an incident related to the signature of
> > the .fr zone occurred that had repercussions among most of the users
> > and members of the profession currently involved in the deployment of
> > DNSSEC. In order to allow as large a community as possible to benefit
> > from that experience, we have chosen to describe and analyse the
> > incident in the most detailed way possible in order to serve as a
> > basis for future discussions on the issue.
> > 
> > ... [Read the rest online]
> > 
> > For more information, two AFNIC employees will be at the OARC workshop
> > in San Francisco <https://www.dns-oarc.net/oarc/workshop-201103>.
> > 
> > 
> > _______________________________________________
> > dns-operations mailing list
> > dns-operations at lists.dns-oarc.net
> > https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org