Re: The problem I see with DNSSEC as a potential end user and administrator.

[" Ondřej Surý " <[e-mail]>]

2008/8/8 Duane at e164 dot org <[e-mail]>:
> Ondřej Surý wrote:
>> 2008/8/8 Duane at e164 dot org <[e-mail]>:
>>> Ondřej Surý wrote:
>>>
>>>> I know that it does add more burder of shoulder of any sysadmin, but
>>>> is it really so much - add a cron job and some monitoring script and
>>>> you are done?
>>> at some point you load the beasts of burden up with so much work that
>>> one extra piece of straw is all that is needed or takes to break the
>>> poor animals back.
>>
>> But now is starts to be only rhethorical discussion.  Have you calculated
>> how much additional work it would be for you?  Using right tools for it
>> (like dnssec-tools[1] or ZKT[2])?
>
> If I have to go out of my way to learn about this stuff you again have
> shown it is neither straight forward nor simple to do.
>
> Until I can type a single command (or no commands) that sets everything
> up I really can't be bothered, since there is no perceived benefit in
> doing so for me.

So when you installed your DNS server infrastructure, was it just
some "magic" command which caused all your domain names to be server
by that servers?  Or did you have to make changes to config files,
generate TSIG keys, configure primary, configure slaves, add zones
to config file...

I see kind of analogy here.  Available tools are bit rough at this time,
but it's magnituted better that it was half a year ago.

Ondrej.
-- 
 Ondřej Surý
 technický ředitel/Chief Technical Officer
 -----------------------------------------
 CZ.NIC, z.s.p.o. -- .cz domain registry
 Americká 23,120 00 Praha 2,Czech Republic
 mailto:[e-mail] http://nic.cz/
 sip:[e-mail] tel:[phone]
 mob:[phone] fax:[phone]
 -----------------------------------------
¶‹§²æìr¸›zǧu©ž²Æ zÚ'jg®Šiz»+z«ž²Ú)²'­~ŠàÂ+a¶°¢·nžË›±Êâmè§jȧ‚W¥Šwš²Ø^™ë,j­{[¡Üš­Èb½èm¶Ÿÿ¢›"z×è®åŠËlþv¦yÚ覗«³