Re: [DNSOP] I-D Action: draft-livingood-dnsop-dont-switch-resolvers-04.txt

Stephane Bortzmeyer <bortzmeyer@nic.fr> Tue, 26 March 2019 09:25 UTC

Return-Path: <stephane@laperouse.bortzmeyer.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19B8B1202ED for <dnsop@ietfa.amsl.com>; Tue, 26 Mar 2019 02:25:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tPY7wdHl5kXv for <dnsop@ietfa.amsl.com>; Tue, 26 Mar 2019 02:25:15 -0700 (PDT)
Received: from ayla.bortzmeyer.org (ayla.bortzmeyer.org [92.243.4.211]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7DB351202EC for <dnsop@ietf.org>; Tue, 26 Mar 2019 02:25:15 -0700 (PDT)
Received: by ayla.bortzmeyer.org (Postfix, from userid 10) id 7DD6FA0531; Tue, 26 Mar 2019 10:25:13 +0100 (CET)
Received: by godin (Postfix, from userid 1000) id C6895EC0AFC; Tue, 26 Mar 2019 10:24:04 +0100 (CET)
Date: Tue, 26 Mar 2019 10:24:04 +0100
From: Stephane Bortzmeyer <bortzmeyer@nic.fr>
To: dnsop@ietf.org
Message-ID: <20190326092404.GA30006@laperouse.bortzmeyer.org>
References: <155052761961.25970.4766207639930878911@ietfa.amsl.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <155052761961.25970.4766207639930878911@ietfa.amsl.com>
X-Transport: UUCP rules
X-Operating-System: Ubuntu 18.04 (bionic)
X-Charlie: Je suis Charlie
User-Agent: Mutt/1.9.4 (2018-02-28)
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/sMr5NBUcMk3eGk85vqFPOZEdTPU>
Subject: Re: [DNSOP] I-D Action: draft-livingood-dnsop-dont-switch-resolvers-04.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Mar 2019 09:25:24 -0000

On Mon, Feb 18, 2019 at 02:06:59PM -0800,
 internet-drafts@ietf.org <internet-drafts@ietf.org> wrote 
 a message of 48 lines which said:

>         Title           : In Case of DNSSEC Validation Failures, Do Not Change Resolvers
>         Author          : Jason Livingood
> 	Filename        : draft-livingood-dnsop-dont-switch-resolvers-04.txt
> 	Pages           : 8
> 	Date            : 2019-02-18

Good for me. Useful document. One suggestion:

> independent third party sites or tools that can confirm whether or
> not a DNSSEC-related error is present, of which several exist today
> (e.g.  DNSViz [1], Verisign DNSSEC Debugger [2]).

I suggest to add Zonemaster <https://zonemaster.fr/> to this list.