[dns-operations] RFC 6975 (was: Re: Algorithm 5 and 7 trends (please move to 8 or 13))

Petr Špaček petr.spacek at nic.cz
Wed Jun 3 08:52:37 UTC 2020


On 03. 06. 20 7:18, Brian Somers wrote:
> On May 28, 2020, at 10:35 PM, Viktor Dukhovni <ietf-dane at dukhovni.org> wrote:
>>
>> Enough time has passed since the need to abandon SHA-1 has become
>> more pressing to discern at least a couple short-term trend-lines.
> 
> Along these lines, have any of the large resolvers implemented
> RFC 6975 (DAU/DHU/N3U EDNS codes)?  OpenDNS/Cisco
> enabled these a couple of weeks ago but had to disable them
> pending qq.com being fixed (its nameservers returned
> SERVFAIL).  Now that the fix is there, we’re planning to turn
> it up again at the end of the week.
> 
> Just curious about its adoption… it feels like we testing new
> waters here.

I believe you are the first, congrats! :-)

It was not feasible to implement before https://dnsflagday.net/2019/ and then, you know, nobody asked for it ...

Please report other issues you eventually encounter, I would bet there will be couple more lurking somewhere.

-- 
Petr Špaček  @  CZ.NIC


More information about the dns-operations mailing list