Re: [dns-operations] any registries require DNSKEY not DS?

h the key and DS, probably to double check the DS themselves), BE and EU are some example that comes immediately to mind. There are others. DE is definitively one also. -- Patrick Mevzek ___ dns-operations mailing list dns-operations@lists.dns-oarc.

Re: [dns-operations] any registries require DNSKEY not DS?

domain (or at least not just once at delegation time but after also). -- Patrick Mevzek ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] Request for Help: Who is looking after .org DNSsec?

ne to remove or update it, as needed. -- Patrick Mevzek ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] How widely implemented are different DNSSEC algorithms?

graphs on https://dnsthought.nlnetlabs.nl/ With some presentation/explanation at https://indico.dns-oarc.net/event/29/contributions/654/attachments/633/1041/dnsthought-oarc29.pdf -- Patrick Mevzek ___ dns-operations mailing list dns-operations

Re: [dns-operations] Verisign won't delete obsolete glue records?

yone who thought that was a good idea gave it up. Really? I do know of at least one ccTLD going from attributes to hosts indeed but .DE, while not using EPP but something similar, is still under the model of hosts as attributes. .BE .EU .AT at least are also using attributes. -- Patrick

Re: [dns-operations] Verisign won't delete obsolete glue records?

istrars, or existing as duplicates, for each registrar their own (if I recall correctly, too many cases to remember). -- Patrick Mevzek ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] Verisign won't delete obsolete glue records?

g. I still think it's a bad idea :) but I'm glad at least > the feature isn't just sitting idle. At least .BE and .EU have also the concept of "nslist" which is an object itself, as a list of nameservers. -- Patrick Mevzek _

Re: [dns-operations] Old version of dig on macOS

Why rely on OS supplied tools for anything not directly OS related like upgrades and what not? Not answering your question directly, but install dig with homebrew (package: bind) and you have `9.18.18` or even later at your fingertips. -- Patrick Mevzek

Re: [dns-operations] Is NXDOMAIN wrong when a record of the same label but different type exists?

624=on&ignore_rfc9276=on&ta=.&tk= is clearly showing the problems, just pass on all the warning signs at the nodes on bottom, and they reference specific RFC sections. -- Patrick Mevzek ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Re: [dns-operations] xn--

https://security.stackexchange.com/a/258231/137710 It has a section about new prefixes too. -- Patrick Mevzek ___ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations