Phil Stracchino skrev den 2015-11-10 16:51:
I'm not even ready to look at TLSA yet. I'm actually still working on
finishing up my DKIM setup. Does anyone have a favorite preferred
information resource for a how-to on getting started with DNSSEC?
here is my story on DNSSEC
when i used junc.org for email it was not possible to have the DS record
added to registra holder, api missed, so i got the advise from my dns
server admins to get a eu tld domain, so i got junc.eu, this domain was
DNSSEC at that stage without doing anything
summary up, it depends on tld, and how much work the selected dns server
does for domain owners
test points:
dig +trace junc.org
dig +trace junc.eu
https://dane.sys4.de/smtp/junc.org
still learning by reading here