3 ms·
Are there any other specs that ICANN tells everyone to deploy that regularly take down entire TLDs, DNS providers, and occasionally an entire RIR? [0]: https:/
by lvh 8y ago
Are there any other specs that ICANN tells everyone to deploy that regularly take down entire TLDs, DNS providers, and occasionally an entire RIR?
[0]: https://www.icann.org/news/announcement-2019-02-22-en https://www.icann.org/news/announcement-2019-02-22-en
[1]: https://ianix.com/pub/dnssec-outages.html https://ianix.com/pub/dnssec-outages.html
(Disclaimer: I work with 'tptacek but I agree with him because he's right not because I have to ;-))
- subway 8y agoYou can be right about something without bringing it up every chance you get, despite it only having a vague relation to any topic being discussed.
- tptacek 8y agoAvoiding DNSSEC is literally, in the literal sense of the word literally, the primary motivation for MTA-STS. The relationship to this thread is not vague. (Source: the section of the RFC that says the primary motivation of MTA-STS is to ensure transport security when deployment of DNSSEC is undesirable or impractical.)