3 ms·
comcast.net is DNSSEC signed and Comcast was one of the first major ISPs to implement DNSSEC validation. Comcast's MX records are DNSSEC signed. > dig +dnssec
by AndyMcConachie 5y ago
comcast.net is DNSSEC signed and Comcast was one of the first major ISPs to implement DNSSEC validation. Comcast's MX records are DNSSEC signed.
> dig +dnssec comcast.net MX
This has nothing to do with DNSSEC.
- Dylan16807 5y agoIt has nothing to do with Comcast not liking DNSSEC. But if the ecosystem as a whole was happy about DNSSEC and DANE, it's somewhat doubtful we'd have both specs and the involvement of https.
- tptacek 5y agoWe would not. There'd be no reason to have MTA-STS if there was universal DNSSEC deployment. Of course, outages like this would be vastly more common, because DNSSEC includes a large superset of the failure modes of MTA-STS.