Promoting DNSSEC to nay-sayers

Tony Finch dot at
Fri Sep 29 11:12:19 UTC 2017

Sean Channel <pentabular at> wrote:

> May I please ask this audience for advice on if and how to promote
> DNSSEC to those who nay-say?

There's a really neat DNSSEC-related improvement on the way: RFC 8198
negative answer synthesis. This should greatly reduce the amount of junk
queries to the root name servers (and other parts of the namespace too).
Should be particularly good for mail servers that deal with amazing
amounts of toxic waste.

f.anthony.n.finch  <dot at>  -  I xn--zr8h punycode
Wight, Portland, Plymouth: Southwest 4 or 5, occasionally 6 later. Moderate or
rough, but rough or very rough in Plymouth. Showers. Good, occasionally
moderate later.

More information about the bind-workers mailing list