<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 16px; font-family: Calibri, sans-serif; ">
<div>Since there's been a bunch of discussion about this IETF document lately - <a href="http://tools.ietf.org/html/draft-livingood-negative-trust-anchors-01">http://tools.ietf.org/html/draft-livingood-negative-trust-anchors-01</a></div>
<div><br>
</div>
<div>Per <a href="http://www.dnssec.comcast.net">http://www.dnssec.comcast.net</a>/ </div>
<div><br>
</div>
<div>- Jason</div>
<div><span class="Apple-style-span" style="font-size: 14px; font-weight: bold; font-family: Tahoma, Arial, Helvetica, sans-serif; "><br>
</span></div>
<div><span class="Apple-style-span" style="font-size: 14px; font-weight: bold; font-family: Tahoma, Arial, Helvetica, sans-serif; ">Upcoming Removal of Three Negative Trust Anchors</span></div>
<div><span class="Apple-style-span" style="font-size: 14px; font-weight: bold; font-family: Tahoma, Arial, Helvetica, sans-serif; ">Monday, May 21, 2012</span></div>
<div>
<p style="font-size: 13px; color: rgb(0, 0, 0); font-family: Arial, Helvetica, sans-serif; line-height: 1.65em; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); ">
Comcast plans to remove three separate <a href="http://tools.ietf.org/html/draft-livingood-negative-trust-anchors-01" style="color: rgb(57, 109, 229); font-weight: bold; text-decoration: underline; ">Negative Trust Anchors</a> for the domains bayfieldelectric.com,
bitcoinica.com, and fbo.gov. These will be removed on Tuesday, May 29, 2012. In each case these Negative Trust Anchors were put in place at the request of our customers. Good faith efforts to contact each domain and resolve these problems have been made. The <a href="http://tools.ietf.org/html/draft-livingood-negative-trust-anchors-01#section-5" style="color: rgb(57, 109, 229); font-weight: bold; text-decoration: underline; ">responsibility
for properly configured DNS records</a> lies with domain administrators. The details for each domain are as follows:<br>
</p>
<ul style="color: rgb(0, 0, 0); font-family: arial, helvetica, verdana, sans-serif; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); ">
<li>bayfieldelectric.com<br>
- Negative Trust Anchor added 2/29/12<br>
- Issue appears due to the presence of DS records in the .com TLD, indicating a signed domain, but the domain itself is unsigned<br>
- DNSViz report at <a href="http://dnsviz.net/d/bayfieldelectric.com/T7Xw4A/dnssec/" style="color: rgb(57, 109, 229); font-weight: bold; text-decoration: underline; ">http://dnsviz.net/d/bayfieldelectric.com/T7Xw4A/dnssec/</a></li><li>bitcoinica.com<br>
- Negative Trust Anchor added 1/22/12<br>
- Issue appears due to the presence of DS records in the .com TLD, indicating a signed domain, but the domain itself is unsigned<br>
- DNSViz report at <a href="http://dnsviz.net/d/bitcoinica.com/T7ZW9Q/dnssec/" style="color: rgb(57, 109, 229); font-weight: bold; text-decoration: underline; ">http://dnsviz.net/d/bitcoinica.com/T7ZW9Q/dnssec/</a></li><li>fbo.gov<br>
- Negative Trust Anchor added 4/23/12<br>
- Issue appears due to expired keys in the domain<br>
- DNSViz report at <a href="http://dnsviz.net/d/fbo.gov/T7YMCQ/dnssec/" style="color: rgb(57, 109, 229); font-weight: bold; text-decoration: underline; ">http://dnsviz.net/d/fbo.gov/T7YMCQ/dnssec/</a></li></ul>
</div>
</body>
</html>