Re: kolabsys.com still have dnssec unsecure :/

2021-05-07 Thread Viktor Dukhovni
On Tue, May 04, 2021 at 09:35:29PM +0200, Benny Pedersen wrote: > rndc nta kolabsys.com > > After that I see that ssl gives untrusted, but mail to maillist is > atleast delivered > > Should I resolve the untrusted part seen from > > posttls_finger lists.roundcube.net It is not clear what you'

Re: kolabsys.com still have dnssec unsecure :/

2021-05-04 Thread Benny Pedersen
On 2021-05-04 21:58, Bastian Blank wrote: | % drill -TD kolabsys.com -k /tmp/source/dns-root-data-2021011101/root.key | ;; Number of trusted keys: 1 | ;; Domain: . | [T] . 172800 IN DNSKEY 256 3 8 ;{id = 14631 (zsk), size = 2048b} | [T] com. 86400 IN DNSKEY 256 3 8 ;{id = 54714 (zsk), size = 12

Re: kolabsys.com still have dnssec unsecure :/

2021-05-04 Thread Bastian Blank
Hi Benny On Tue, May 04, 2021 at 09:35:29PM +0200, Benny Pedersen wrote: > in bind9 i just do > rndc nta kolabsys.com > it have being a problem very long time now :/ What is the problem you are seeing? Yes, kolabsys.com is not in good shape, see https://dnsviz.net/d/kolabsys.com/dnssec/. But is

kolabsys.com still have dnssec unsecure :/

2021-05-04 Thread Benny Pedersen
in bind9 i just do rndc nta kolabsys.com it have being a problem very long time now :/ after that i see that ssl gives untrusted, but mail to maillist is atleast delivered should i resolve the untrusted part seen from posttls_finger lists.roundcube.net ?