[dns-operations] .VN ccTLD DNSSEC: turned on, but still rough around the edges...

Viktor Dukhovni ietf-dane at dukhovni.org
Mon Jan 2 07:17:27 UTC 2017

There is a very new DS RRset for the .vn (Vietnam) ccTLD.

However, the underlying nameservers are not quite DNSSEC-ready.
See for example:


which shows denial of DS records for com.vn to be in bad shape.
I hope this will be addressed, if anyone knows the right contacts,
please forward this along...


P.S. On the other hand, good to see some movement towards DNSSEC
on the ccTLD front,   by the way.  In 2016 11 ccTLDs got signed:
az, hk, il, ma, mg, ro, sg, sn, sy, vn and za.  The .ro ccTLD
even has 11 sub-domains with working DANE TLSA records.

More information about the dns-operations mailing list