Re: [dns-operations] DNS .com/.net resolution problems in the Asia/Pacific region

> On 20 Jul 2023, at 01:23, Shumon Huque wrote: > > On Wed, Jul 19, 2023 at 3:28 AM Shane Kerr wrote: > Shumon and all, > > On 18/07/2023 21.41, Shumon Huque wrote: > > On Tue, Jul 18, 2023 at 3:29 PM Viktor Dukhovni > > wrote: > > > > Yes, I agree. A resolve

[dns-operations] Root zone operational announcement: introducing ZONEMD for the root zone

--- Begin Message --- I am pleased to announce that Message Digests for DNS Zones, also known as ZONEMD, will be added to the root zone later this year. This feature, specified in RFC 8976, adds cryptographic data protections to the zone as a whole, allowing the recipient to verify the authenti

Re: [dns-operations] DNS .com/.net resolution problems in the Asia/Pacific region

On Wed, Jul 19, 2023 at 3:28 AM Shane Kerr wrote: > Shumon and all, > > On 18/07/2023 21.41, Shumon Huque wrote: > > On Tue, Jul 18, 2023 at 3:29 PM Viktor Dukhovni > > wrote: > > > > Yes, I agree. A resolver can't really tell that a response with an > > expired si

Re: [dns-operations] DNS .com/.net resolution problems in the Asia/Pacific region

Shumon and all, On 18/07/2023 21.41, Shumon Huque wrote: On Tue, Jul 18, 2023 at 3:29 PM Viktor Dukhovni > wrote: Yes, I agree. A resolver can't really tell that a response with an expired signature wasn't an attacker trying to replay old data. For robustness ag