[AusNOG] What's even less popular than IPv6? DNSSEC!

Chris Jones chrisj at aprole.com
Tue May 24 23:12:09 EST 2016


> On 24 May 2016, at 9:20 PM, Mark Prior <mrp at mrp.net> wrote:
> 
> I've added a test for DNSSEC deployment to my existing IPv6 survey and
> it's not pretty. Looking at the section that lists the organisations
> that attended AusNOG2 shows no organisations (aside from me) using
> DNSSEC on their domain and other sections are just as bare.
> 
> <http://www.mrp.net/ipv6_survey/#ausnog>
> 
> The obvious question is why isn't DNSSEC being deployed?

We’ve had trouble with registrars and DNSSEC support.  A bunch (* non-scientific research here) of them simply don’t support it, or support it via manual processes.

You thought ipv6 glue records were a pain, try getting DS records rotated...



More information about the AusNOG mailing list