[dns-operations] RFC 6975 (was: Re: Algorithm 5 and 7 trends (please move to 8 or 13))

[Viktor Dukhovni]

On Wed, Jun 10, 2020 at 07:25:17AM +0200, Daniel Stirnimann wrote:

> How can TLDs find contact email addresses of name server operators? Or
> how has this been done in the past?

But, presumably you are better able than most to find contact addresses
for the .ch registrants.  The registrant can pursue the issue with the
nameserver operator or get himself a more competent DNS operator.

You could announce and gradually implement a policy of removing glue to
persistently broken namesevers.  That would largely make the problem
self-correcting.

The .br TLD has remarkably few DNSSEC-related issues, I doubt that's
an accident:

    https://stats.dnssec-tools.org/#tldbreakdown

The .ch TLD is doing better than average, but there a non-trivial
qualitative difference between 99.96% and 99.24% working DNS(SEC).

-- 
    Viktor.