[dns-operations] .VN ccTLD DNSSEC: turned on, but still rough around the edges...

Viktor Dukhovni ietf-dane at dukhovni.org
Mon Jan 2 07:17:27 UTC 2017


There is a very new DS RRset for the .vn (Vietnam) ccTLD.

However, the underlying nameservers are not quite DNSSEC-ready.
See for example:

   http://dnsviz.net/d/vietnamworks.com.vn/WGn3qQ/dnssec/

which shows denial of DS records for com.vn to be in bad shape.
I hope this will be addressed, if anyone knows the right contacts,
please forward this along...

-- 
	Viktor.

P.S. On the other hand, good to see some movement towards DNSSEC
on the ccTLD front,   by the way.  In 2016 11 ccTLDs got signed:
az, hk, il, ma, mg, ro, sg, sn, sy, vn and za.  The .ro ccTLD
even has 11 sub-domains with working DANE TLSA records.




More information about the dns-operations mailing list