[dns-operations] ECDSA and Google Public DNS

Francis Dupont Francis.Dupont at fdupont.fr
Thu Jan 16 22:54:09 UTC 2014


 In your previous mail you wrote:

>  I set up an experimental ECDSAP256SHA256-signed zone

=> courageous! BTW SecSpider counts 19 ECDSAP256SHA256 keys
(better than last year...)

> and found that Google Public DNS treats this zone as insecure
> (ad-bit not set).

=> as you explained Google simply doesn't handle (yet) ECDSA.

Regards

Francis.Dupont at fdupont.fr (also fdupont at isc.org and a fan of ECC :-)



More information about the dns-operations mailing list