Re: DNSSEC is hard to get right

"Richard L. Barnes" <rbarnes@bbn.com> Tue, 31 August 2010 11:06 UTC

Return-Path: <rbarnes@bbn.com>
X-Original-To: ietf@core3.amsl.com
Delivered-To: ietf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A2173A68D6 for <ietf@core3.amsl.com>; Tue, 31 Aug 2010 04:06:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.545
X-Spam-Level:
X-Spam-Status: No, score=-102.545 tagged_above=-999 required=5 tests=[AWL=0.054, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wgyBH6JWVXiA for <ietf@core3.amsl.com>; Tue, 31 Aug 2010 04:06:53 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id E86423A6A42 for <ietf@ietf.org>; Tue, 31 Aug 2010 04:06:51 -0700 (PDT)
Received: from [128.89.254.81] (port=59099 helo=[192.168.1.43]) by smtp.bbn.com with esmtp (Exim 4.71 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1OqOgU-000AV7-DD; Tue, 31 Aug 2010 07:07:22 -0400
Message-Id: <2ECFEE54-8D74-43BC-87F1-14DE97D4B840@bbn.com>
From: "Richard L. Barnes" <rbarnes@bbn.com>
To: Stephane Bortzmeyer <bortzmeyer@nic.fr>
In-Reply-To: <20100831064140.GA28274@nic.fr>
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v936)
Subject: Re: DNSSEC is hard to get right
Date: Tue, 31 Aug 2010 07:07:21 -0400
References: <20100831064140.GA28274@nic.fr>
X-Mailer: Apple Mail (2.936)
Cc: ietf@ietf.org
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Aug 2010 11:06:55 -0000

Another view, for the visually inclined:
<http://dnsviz.net/d/iab.org/dnssec/>


On Aug 31, 2010, at 2:41 AM, Stephane Bortzmeyer wrote:

> % check-sig iab.org
> Name iab.org has an expired signature (20100829223019)
>
> :-(
> _______________________________________________
> Ietf mailing list
> Ietf@ietf.org
> https://www.ietf.org/mailman/listinfo/ietf