[dns-operations] slack.com bogus

Evan Hunt each at isc.org
Fri Oct 1 02:02:57 UTC 2021


On Thu, Sep 30, 2021 at 02:51:33PM -0700, Paul Vixie wrote:
> i know that. i just don't like it. without backpressure, sloppiness will 
> normalize. (always.)

This is one of the reasons NTA's in BIND are time-limited.  (Default
one hour, not to exceed one week.)  At some point, one hopes,
resolver operators will get tired of having to keep resetting
the things.

It's been six years, I haven't seen much evidence of harm to the
DNSSEC ecosystem yet.

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.



More information about the dns-operations mailing list