<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On May 31, 2013, at 8:38 AM, Joe Abley <<a href="mailto:jabley@hopcount.ca">jabley@hopcount.ca</a>> wrote:</div><blockquote type="cite">As I mentioned obliquely, I haven't heard of any widespread use of TSIG or SIG(0) to authenticate the channel between a stub resolver and a recursive resolver, but I'd hesitate to deny that there's any deployment without thinking of what numbers could possibly back up that claim.<br></blockquote></div><br><div> That was the idea behind <a href="http://dnssig.org/">http://dnssig.org/</a></div><div><br></div><div> I gave up after discovering too many home routers dropping SIG records.</div></body></html>