[AusNOG] What's even less popular than IPv6? DNSSEC!

Mark Prior mrp at mrp.net
Wed May 25 10:52:15 EST 2016


On 25/05/2016 08:38, Mark Andrews wrote:

> DNS as a whole is poorly supported.  Lot of absolutely non RFC complaint
> garbage being used today.  From my EDNS compliance checking results.

Probably not helped when companies like Apple decide they hate OpenSSL
so much that they remove it from their build of named but don't rebuild
it with anything else. Makes it kinda tough when you get this

dnssec-keygen: fatal: unsupported algorithm: 8

I'll note that Apple don't sign their zone.

Mark.


More information about the AusNOG mailing list