Bind9 with no config file now does the right recursive thing, including dnssec. Knot and unbound and powerdns will not be far behind. We just need to get the word out, to ISPs, Enterprise, SOHO, and end users of Windows, macosx, Linux, and BSD. The hard part will be iOS and Android, due to the permission model and app stores. Those can be last.
Get BlueMail for Android On Mar 23, 2019, 12:39, at 12:39, Jared Mauch <ja...@puck.nether.net> wrote: >On Fri, Mar 22, 2019 at 12:26:47PM -0700, Paul Vixie wrote: >> >> >> Jared Mauch wrote on 2019-03-22 11:59: >> > So my thoughts on this real quick: one of the reasons many people >are >> > using centralized services like 8.8.8.8 (for example) is its >complex >> > to run these servers properly. >> >> i think those optics are the motive, as you say. >> >> however, it is not complex, as you also say. >> >> the optics have been encouraged. >> >> they are misleading. > >I think for you and I it's less complex. When I discuss things with >smaller ISPs running DNS isn't even on their list of things anymore, >similar >to e-mail and other things where to run the service requires some >scale. > >I've seen some quite large providers be unable to configure some simple >DNS settings properly. You have to also look no further than the >research that Mark Andrews and others have done about standards >compliance. > >I don't think it's as hard as it could be, but it's not as easy either. > >- Jared > >-- >Jared Mauch | pgp key available via finger from ja...@puck.nether.net >clue++; | http://puck.nether.net/~jared/ My statements are only >mine.
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
