DNSSEC - does it exist?

James A. Donald jamesd at echeque.com
Wed Oct 25 00:36:32 UTC 2006


     --
Matt Larson wrote:
 > The good news is that the DNSSEC specification is
 > finished and published: see RFCs 4033, 4034 and 4035.
 > It took us in the IETF DNS community an embarrassingly
 > long time to get a protocol that's operationally
 > deployable, but it's done.  (OK, almost done.  There
 > is a late-breaking protocol add-on ...)
 >
 > ... There is already one DNSSEC-signed TLD zone:
 > Sweden's .se. Other TLDs have indicated interest in
 > signing their zones.

Some time back, I issued an obituary for the IETF and
IANA.

If useful well known root keys appear for most well
known top level domains, I will have to retract it.

     --digsig
          James A. Donald
      6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG
      KqzlZAule0YGqLAgnzpfBJAJ1LbTBUpdeoTWenQ5
      4YXckoEMeDyPqdePINYai163AozbvKnqnJooJXnx3



More information about the general mailing list