[dns-operations] Lack of tlsa support

Wed May 27 17:19:01 UTC 2015

Absolutely.

The technology is the easy bit. Deployment is the hard problem.

We are trying to make changes to a machine with ten billion components.
Every single one of which is more complex than the most complex machine
built before the moon landings and some of which are the product of more
human intellectual activity than the sum of all human thought prior to that
date.

Don't expect changing the Internet to be easy, it isn't.

On Wed, May 27, 2015 at 11:16 AM, Mark Andrews <marka at isc.org> wrote:

>
> Do we really have to fight to get every new type supported?
>
> Mark
>
> marka at ednscomp ~/tld-report]$ awk '$4 == "NS" {print $1, $5}' root.db |
> sh gentypereport tlsa | grep -v "all ok"
> accountant. @156.154.144.195 (ns1.dns.nic.accountant.): tlsa=timeout
> accountant. @156.154.145.195 (ns2.dns.nic.accountant.): tlsa=timeout
> accountant. @156.154.159.195 (ns3.dns.nic.accountant.): tlsa=timeout
> accountant. @156.154.156.195 (ns4.dns.nic.accountant.): tlsa=timeout
> accountant. @156.154.157.195 (ns5.dns.nic.accountant.): tlsa=timeout
> accountant. @156.154.158.195 (ns6.dns.nic.accountant.): tlsa=timeout
> aig. @156.154.144.6 (ns1.dns.nic.aig.): tlsa=timeout
> aig. @156.154.145.6 (ns2.dns.nic.aig.): tlsa=timeout
> aig. @156.154.159.6 (ns3.dns.nic.aig.): tlsa=timeout
> aig. @156.154.156.6 (ns4.dns.nic.aig.): tlsa=timeout
> aig. @156.154.157.6 (ns5.dns.nic.aig.): tlsa=timeout
> aig. @156.154.158.6 (ns6.dns.nic.aig.): tlsa=timeout
> al. @194.119.192.8 (ns-al.isti.cnr.it.): tlsa=timeout
> an. @65.174.238.100 (engine2.una.an.): tlsa=timeout
> an. @200.26.199.102 (engine3.una.an.): tlsa=timeout
> ao. @2c0f:f828:2::b (ns02.dns.ao.): tlsa=timeout
> ar. @2801:140::10 (a.dns.ar.): tlsa=timeout
> as. @204.74.112.1 (tld1.ultradns.net.): tlsa=timeout
> as. @204.74.113.1 (tld2.ultradns.net.): tlsa=timeout
> as. @199.7.66.1 (tld3.ultradns.org.): tlsa=timeout
> as. @199.7.67.1 (tld4.ultradns.org.): tlsa=timeout
> as. @192.100.59.11 (tld5.ultradns.info.): tlsa=timeout
> as. @198.133.199.11 (tld6.ultradns.co.uk.): tlsa=timeout
> axa. @156.154.144.20 (ns1.dns.nic.axa.): tlsa=timeout
> axa. @156.154.145.20 (ns2.dns.nic.axa.): tlsa=timeout
> axa. @156.154.159.20 (ns3.dns.nic.axa.): tlsa=timeout
> axa. @156.154.156.20 (ns4.dns.nic.axa.): tlsa=timeout
> axa. @156.154.157.20 (ns5.dns.nic.axa.): tlsa=timeout
> axa. @156.154.158.20 (ns6.dns.nic.axa.): tlsa=timeout
> best. @156.154.144.24 (ns1.dns.nic.best.): tlsa=timeout
> best. @156.154.145.24 (ns2.dns.nic.best.): tlsa=timeout
> best. @156.154.159.24 (ns3.dns.nic.best.): tlsa=timeout
> best. @156.154.156.24 (ns4.dns.nic.best.): tlsa=timeout
> best. @156.154.157.24 (ns5.dns.nic.best.): tlsa=timeout
> best. @156.154.158.24 (ns6.dns.nic.best.): tlsa=timeout
> bf. @193.50.53.3 (ns1.ird.fr.): tlsa=timeout
> bf. @2001:5a0:d00:ffff::42c6:9163 (ns2.as6453.net.): tlsa=timeout
> bf. @66.198.145.99 (ns2.as6453.net.): tlsa=timeout
> bid. @156.154.144.25 (ns1.dns.nic.bid.): tlsa=timeout
> bid. @156.154.145.25 (ns2.dns.nic.bid.): tlsa=timeout
> bid. @156.154.159.25 (ns3.dns.nic.bid.): tlsa=timeout
> bid. @156.154.156.25 (ns4.dns.nic.bid.): tlsa=timeout
> bid. @156.154.157.25 (ns5.dns.nic.bid.): tlsa=timeout
> bid. @156.154.158.25 (ns6.dns.nic.bid.): tlsa=timeout
> biz. @156.154.124.65 (a.gtld.biz.): tlsa=timeout
> biz. @156.154.125.65 (b.gtld.biz.): tlsa=timeout
> biz. @156.154.127.65 (c.gtld.biz.): tlsa=timeout
> biz. @156.154.126.65 (e.gtld.biz.): tlsa=timeout
> biz. @209.173.58.66 (f.gtld.biz.): tlsa=timeout
> biz. @156.154.128.65 (k.gtld.biz.): tlsa=timeout
> bm. @206.53.190.202 (ns1.bm.): tlsa=timeout
> bm. @69.17.194.1 (ns2.bm.): tlsa=timeout
> bt. @2405:d000:0:100::200 (ns1.druknet.bt.): tlsa=timeout
> buzz. @156.154.144.29 (ns1.dns.nic.buzz.): tlsa=timeout
> buzz. @156.154.145.29 (ns2.dns.nic.buzz.): tlsa=timeout
> buzz. @156.154.159.29 (ns3.dns.nic.buzz.): tlsa=timeout
> buzz. @156.154.156.29 (ns4.dns.nic.buzz.): tlsa=timeout
> buzz. @156.154.157.29 (ns5.dns.nic.buzz.): tlsa=timeout
> buzz. @156.154.158.29 (ns6.dns.nic.buzz.): tlsa=timeout
> bw. @2c0f:ff00:0:4::2 (ns1.btc.bw.): tlsa=timeout
> caravan. @156.154.144.32 (ns1.dns.nic.caravan.): tlsa=timeout
> caravan. @156.154.145.32 (ns2.dns.nic.caravan.): tlsa=timeout
> caravan. @156.154.159.32 (ns3.dns.nic.caravan.): tlsa=timeout
> caravan. @156.154.156.32 (ns4.dns.nic.caravan.): tlsa=timeout
> caravan. @156.154.157.32 (ns5.dns.nic.caravan.): tlsa=timeout
> caravan. @156.154.158.32 (ns6.dns.nic.caravan.): tlsa=timeout
> cartier. @156.154.144.34 (ns1.dns.nic.cartier.): tlsa=timeout
> cartier. @156.154.145.34 (ns2.dns.nic.cartier.): tlsa=timeout
> cartier. @156.154.159.34 (ns3.dns.nic.cartier.): tlsa=timeout
> cartier. @156.154.156.34 (ns4.dns.nic.cartier.): tlsa=timeout
> cartier. @156.154.157.34 (ns5.dns.nic.cartier.): tlsa=timeout
> cartier. @156.154.158.34 (ns6.dns.nic.cartier.): tlsa=timeout
> cbn. @156.154.144.35 (ns1.dns.nic.cbn.): tlsa=timeout
> cbn. @156.154.145.35 (ns2.dns.nic.cbn.): tlsa=timeout
> cbn. @156.154.159.35 (ns3.dns.nic.cbn.): tlsa=timeout
> cbn. @156.154.156.35 (ns4.dns.nic.cbn.): tlsa=timeout
> cbn. @156.154.157.35 (ns5.dns.nic.cbn.): tlsa=timeout
> cbn. @156.154.158.35 (ns6.dns.nic.cbn.): tlsa=timeout
> ceo. @156.154.144.37 (ns1.dns.nic.ceo.): tlsa=timeout
> ceo. @156.154.145.37 (ns2.dns.nic.ceo.): tlsa=timeout
> ceo. @156.154.159.37 (ns3.dns.nic.ceo.): tlsa=timeout
> ceo. @156.154.156.37 (ns4.dns.nic.ceo.): tlsa=timeout
>
>
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE:  +61 2 9871 4742                         INTERNET: marka at isc.org
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20150527/ff283104/attachment.html>