On Wed, Aug 18, 2021 at 10:03:06PM -0400, post...@ptld.com wrote:
> > The adoption of DNSSEC seems to have increased a lot in
> > the past 12 months (~30% increase).
>
> Is google / gmail using it yet?
There are 4 GMail MX hosts that are not publicised by Google,
but are DNSSEC signed:
mx[1-4].smtp.goog.
These names also appear in the GMail X.509 certificate. However,
despite ongoing naggin/cajoling Google have not yet published
TLSA records for these MX hosts. So some DNSSEC, but no DANE.
I should also note that Google's DNS hosting arm hosts a very large
number of DNSSEC signed customer domains.
--
VIktor.
