Re: DNS handling

2012-06-23 Thread Björn Persson
Paul Wouters wrote: > Let me know how dnssec-trigger 0.11 works, with the additional > hotspot port 80 manglign detection. I'm afraid my laptop isn't all that usable right now – https://bugzilla.redhat.com/show_bug.cgi?id=832723 – but I'll see what I can do. Björn Persson signature.asc Descri

Re: DNS handling

2012-06-21 Thread Paul Wouters
On Thu, 21 Jun 2012, Björn Persson wrote: I installed DNSsec-trigger a few months ago and tried it out in a few networks. It seemed to work as advertised in all cases. A hotspot run by a nearby shopping center turned out to be a very hostile network where pretty much everything except HTTPS was

Re: DNS handling

2012-06-21 Thread Björn Persson
Paul Wouters wrote: > Install dnssec-trigger, start the dnssec-trigger panel application and > please give me feedback! Especially when you experience dns failures at > hotspots. There are so many different kinds of broken dns out there, I'm > sure we need to do more inventive things to make it wor

Re: DNS handling was Re: default DNS caching name server on Fedora ?

2012-06-21 Thread Paul Wouters
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 06/21/2012 10:44 AM, Stephen Gallagher wrote: > On Wed, 2012-06-20 at 16:42 -0400, Paul Wouters wrote: >> Install dnssec-trigger, start the dnssec-trigger panel >> application and please give me feedback! Especially when you >> experience dns fail

Re: DNS handling was Re: default DNS caching name server on Fedora ?

2012-06-21 Thread Stephen Gallagher
On Wed, 2012-06-20 at 16:42 -0400, Paul Wouters wrote: > Install dnssec-trigger, start the dnssec-trigger panel application and > please give me feedback! Especially when you experience dns failures at > hotspots. There are so many different kinds of broken dns out there, I'm > sure we need to do m

DNS handling was Re: default DNS caching name server on Fedora ?

2012-06-20 Thread Paul Wouters
People have might missed it before, but Fedora does a lot now with handling the various DNS manglings it can encounter in the wild. If you install dnssec-trigger from rawhide, then your DNS will be automatically configured using DNSSEC and with as much security as possible, while detecting hotsp