On 3/10/15, 12:11 PM, "Edward Lewis" <edward.le...@icann.org> wrote:

>I (as well as others) knew this day would come -
>when an ISP would get the brunt of someone's DNSSEC misfire.  (Others
>include many who worked on the original design and deployment workshops.)

It won¹t be the last time! ;-)

>The only way I can make this up to you is to better my efforts at making
>DNSSEC an easier to run, less clumsy protocol.

Works for me! That¹d be awesome. :-) DNSSEC needs to be super easy to use
as an authoritative operator, running on auto-pilot after initial setup.
The simpler & more automated operations are, the less fragile the signing
infrastructure will be (and the whole thing end to end of course).

- Jason


_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

Reply via email to