<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On Feb 3, 2012, at 10:43 AM, Casey Deccio wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">On Fri, Feb 3, 2012 at 9:53 AM, Cricket Liu <span dir="ltr"><<a href="mailto:cricket@infoblox.com">cricket@infoblox.com</a>></span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex; position: static; z-index: auto; ">
<div class="im">This is consistent with something I noticed earlier: DNSViz validates <a href="http://oppedahl.com/" target="_blank">oppedahl.com</a>'s chain of trust without a problem, but Verisign Labs' DNSSEC Debugger reports no response from <a href="http://oppedahl.com/" target="_blank">oppedahl.com</a>'s name servers. DNSViz is hosted by Sandia, presumably in New Mexico, while Verisign Labs is in the D.C. area.</div></blockquote><div><br></div><div>FWIW, DNSViz is actually hosted out of Sandia's Livermore, CA, site, in the SF Bay Area :)</div></div></blockquote><div><br></div>Close-by, then! (And thanks for setting up the service, Casey. It's really useful.)</div><div><br><blockquote type="cite"><div class="gmail_quote"><div>Geography aside, issues such as anycast instances and resolver perspective are things I plan to address for DNSViz to make it a more useful tool. We're looking to procure funding to continue work on it in these areas and others.</div>
</div></blockquote><br></div><div>Given how common the use of anycast is becoming, that would be a great enhancement.</div><div><br></div><div>cricket</div><br></body></html>