On Mon, Mar 01, 2021 at 08:21:21AM -0500, Jim Popovitch via dns-operations 
wrote:
> ...
> 
> Over on the email side, I know of several instances in the past 5+ years
> where email providers have had to disable TLS and/or DANE/DNSSEC checks
> (i.e. postfix's smtp_tls_policy_maps) for .mil and .gov domains due
> mostly in part for poor key rollover management practives/monitoring.

so, this is a game of "chicken" where the wrong people keep flinching.

-- 
Paul Vixie
_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Reply via email to