[dns-operations] google DNS doing validation?

[Mark Andrews]

> On 28 Jul 2018, at 4:46 am, Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
> 
> 
> 
>> On Jul 27, 2018, at 2:16 PM, Wessels, Duane <dwessels at verisign.com> wrote:
>> 
>> Yes you should!
>> 
>> I'm proud to say that I've earned the "cream of the crop" award [1] from ianix.com with 4.5 years continuous downtime of validatorsearch.verisignlabs.com!
>> 
>> [1] See the very bottom of https://ianix.com/pub/dnssec-outages.html
> 
> Nice.
> 
> Overall, out of 8,521,213 secure delegations I see 156,976 DNSKEY lookup
> problems (not always DNSSEC, lame delegations, and other routine issues
> are common).  A large fraction is just from parked domains under .SE and .NU
> (44999 and 9225 resp.)  I'll post more detailed July DNSSEC stats soon.
> 
> Out of 4,305,133 MX hosts in signed zones, just 999 exhibit TLSA record
> lookup problems (denial of existence bugs, CNAME loops, bad SOA
> signatures, ...).
> 
> The vast majority of the problems are concentrated at a handful of DNS
> operators with stale software, fragile processes or just parked domains
> they don't need or care to have working.

If they don’t want them to work perhaps the delegations should just be
removed.

> Overall, the ecosystem as a whole is functioning.
> 
> -- 
> 	Viktor.
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org