Re: [Danish] Proposed WG Charter

[Viktor Dukhovni <[e-mail]>]

On Tue, Jun 15, 2021 at 10:26:31AM -0700, Ash Wilson wrote:

> DNSSEC adoption has historically suffered from technical and perception challenges.
                      ------------                             ----------

The technical issues are solvable, and much progress has been made and
continues.  It is time to move beyond the historical misperceptions.

> The current adoption of DNSSEC is disappointing. That number is currently
> 2.47% for the .com TLD (citing this time: http://rick.eng.br/dnssecstat/)

This is misleading.  What's more interesting is the marginal rate of
adoption of new domain registrations.  Recent measurements show this
to be around 20%!  We can make this even more appealing by actually
using DNSSEC in our standards.

> Not all CS college programs include DNSSEC (or PKI, for that matter) at
> sufficient depth. Graduates aren't prepared to champion DNSSEC
> implementation in the face of DNSSEC's perception problems in the
> enterprise.

Or DNS at all, or networking, ... people learn on the job.

> For DNSSEC, the right materials exist. DNSSEC is one of the best-documented
> sets of standards on the Internet. How-to guides are abundant. Nobody can
> say that DNSSEC isn't well-documented.

I can definitely say that, because best-practices are not as well
understood as they should be, and the tools have improved dramatically
recently, so some relearning is required, and the tutorials have not
yet caught up.

There's work to be done, but none of if significantly insurmountable.

-- 
    Viktor.