Promoting DNSSEC to nay-sayers

Tony Finch dot at dotat.at
Fri Sep 29 11:12:19 UTC 2017


Sean Channel <pentabular at gmail.com> wrote:

> May I please ask this audience for advice on if and how to promote
> DNSSEC to those who nay-say?

There's a really neat DNSSEC-related improvement on the way: RFC 8198
negative answer synthesis. This should greatly reduce the amount of junk
queries to the root name servers (and other parts of the namespace too).
Should be particularly good for mail servers that deal with amazing
amounts of toxic waste.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/  -  I xn--zr8h punycode
Wight, Portland, Plymouth: Southwest 4 or 5, occasionally 6 later. Moderate or
rough, but rough or very rough in Plymouth. Showers. Good, occasionally
moderate later.


More information about the bind-workers mailing list