[AusNOG] What's even less popular than IPv6? DNSSEC!

[Mark Prior]

On 25/05/2016 08:38, Mark Andrews wrote:

> DNS as a whole is poorly supported.  Lot of absolutely non RFC complaint
> garbage being used today.  From my EDNS compliance checking results.

Probably not helped when companies like Apple decide they hate OpenSSL
so much that they remove it from their build of named but don't rebuild
it with anything else. Makes it kinda tough when you get this

dnssec-keygen: fatal: unsupported algorithm: 8

I'll note that Apple don't sign their zone.

Mark.