[dns-operations] DNSSEC signatures expired for getdnsapi.org and getdnsapi.net

Roy Arends roy at dnss.ec
Mon Sep 18 13:49:51 UTC 2017


+1

Roy

> On 18 Sep 2017, at 11:34, bert hubert <bert.hubert at netherlabs.nl> wrote:

> I'd like to suggest DNS solutions that autosign. There are millions of
> autosigning domains out there (the vast majority even). We continue to see
> "manual" signing fail, even with very smart operators. 
> 
> I realize not all security goals can be met with such a solution. But I also
> realize we are the butt of a lot of jokes if even the DNSSEC cognoscenti
> aren't able to keep their domains working.
> 
> 	Bert
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations





More information about the dns-operations mailing list