[sunset4] future of dnssec?

"Heatley, Nick" <nick.heatley@ee.co.uk> Wed, 22 February 2017 12:23 UTC

Return-Path: <nick.heatley@ee.co.uk>
X-Original-To: sunset4@ietfa.amsl.com
Delivered-To: sunset4@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9458012979D for <sunset4@ietfa.amsl.com>; Wed, 22 Feb 2017 04:23:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.788
X-Spam-Level:
X-Spam-Status: No, score=-3.788 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-1.887, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4xp5o_jCLK0F for <sunset4@ietfa.amsl.com>; Wed, 22 Feb 2017 04:23:46 -0800 (PST)
Received: from mail1.bemta5.messagelabs.com (mail1.bemta5.messagelabs.com [195.245.231.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE8E9129781 for <sunset4@ietf.org>; Wed, 22 Feb 2017 04:23:45 -0800 (PST)
Received: from [85.158.139.211] by server-1.bemta-5.messagelabs.com id 5B/A3-23102-FC28DA85; Wed, 22 Feb 2017 12:23:43 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrHIsWRWlGSWpSXmKPExsUy9d9HH93zTWs jDC5+kbBYuWc/uwOjx5IlP5kCGKNYM/OS8isSWDMOPostOK1ecbMts4Fxh3IXIxeHkMAWRomn r5azQTgHGCWWHvrIDOGcYpSYPX0lexcjJwebgK5E+6xVzCC2iICmxMdpf9hAbGEBKYl/2/6xQ 8TlJf7f7mSFsPUklmydBxZnEVCVONDxBMzmFQiV2HLrC5jNKCAr8aVxNdhMZgFxiVtP5jOB2B ICAhJL9pxnhrBFJV4+/scKYStIXFrUxQpRnyfxcvV+JoiZghInZz5hmcAoOAvJqFlIymYhKYO I60gs2P2JDcLWlli28DUzjH3mwGMmZPEFjOyrGDWKU4vKUot0DU30kooy0zNKchMzc3QNDUz1 clOLixPTU3MSk4r1kvNzNzEC44IBCHYwnj3teYhRkoNJSZT3YfbaCCG+pPyUyozE4oz4otKc1 OJDjDIcHEoSvL8bgHKCRanpqRVpmTnACIVJS3DwKInwVoKkeYsLEnOLM9MhUqcYdTkO3L3ykk mIJS8/L1VKnHdDI1CRAEhRRmke3AhYsrjEKCslzMsIdJQQT0FqUW5mCar8K0ZxDkYlYd7LIKt 4MvNK4Da9AjqCCegIS2ewI0oSEVJSDYxeUTEbtvkfvOt6wsAqrOoIu9ycKYKznz19tlXi3joJ zSbFpBgZezVJmeO2fotUX11n+suQkMcZYrpi8YpZVXf37PgqqmI6afrTw9d3aT55ylylI2SUd MPk6qzpf7Xa/B9v3dj6dZtt4o4LXpt0bmcErDDTWqso1s/YuMJNgM1uyRvpwE6VR/ZKLMUZiY ZazEXFiQCvt4ISEQMAAA==
X-Env-Sender: nick.heatley@ee.co.uk
X-Msg-Ref: server-14.tower-206.messagelabs.com!1487766223!47331265!1
X-Originating-IP: [149.254.241.76]
X-StarScan-Received:
X-StarScan-Version: 9.2.3; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 27111 invoked from network); 22 Feb 2017 12:23:43 -0000
Received: from unknown (HELO smtpml01.ee.co.uk) (149.254.241.76) by server-14.tower-206.messagelabs.com with DHE-RSA-AES256-GCM-SHA384 encrypted SMTP; 22 Feb 2017 12:23:43 -0000
Received: from EEUKWV0940.EEAD.EEINT.CO.UK (Not Verified[10.246.209.217]) by smtpml01.ee.co.uk with Trustwave SEG (v7, 5, 6, 8438) id <B58ad82ca0002>; Wed, 22 Feb 2017 12:23:38 +0000
Received: from UK31S005EXS02.EEAD.EEINT.CO.UK (Not Verified[10.246.208.27]) by EEUKWV0940.EEAD.EEINT.CO.UK with Trustwave SEG (v7, 3, 6, 7949) id <B58ad82cd0002>; Wed, 22 Feb 2017 12:23:41 +0000
Received: from UK30S005EXS06.EEAD.EEINT.CO.UK ([fe80::314c:b96c:4a9a:8a79]) by UK31S005EXS02.EEAD.EEINT.CO.UK ([2002:1ef6:d01b::1ef6:d01b]) with mapi id 14.03.0279.002; Wed, 22 Feb 2017 12:23:41 +0000
From: "Heatley, Nick" <nick.heatley@ee.co.uk>
To: "sunset4@ietf.org" <sunset4@ietf.org>
Thread-Topic: future of dnssec?
Thread-Index: AdKNBnRIe2inw1ZcRtC42Vzko3pn/g==
Date: Wed, 22 Feb 2017 12:23:40 +0000
Message-ID: <6536E263028723489CCD5B6821D4B21334D566F0@UK30S005EXS06.EEAD.EEINT.CO.UK>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.246.208.5]
Content-Type: multipart/alternative; boundary="_000_6536E263028723489CCD5B6821D4B21334D566F0UK30S005EXS06EE_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/sunset4/LEZv6DATrDPiknHjtZCqngj3pW8>
Subject: [sunset4] future of dnssec?
X-BeenThere: sunset4@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: sunset4 working group discussion list <sunset4.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sunset4>, <mailto:sunset4-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sunset4/>
List-Post: <mailto:sunset4@ietf.org>
List-Help: <mailto:sunset4-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sunset4>, <mailto:sunset4-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Feb 2017 12:23:47 -0000

Post exhaustion, the majority of cellular networks and some public wifi networks will use DNS64.
DNSSEC and DNS64 do not get along. DNSSEC for "A records only" is broken.
Is this the reason why all content must go v6?
Or is the case for DNSSEC still questionable?
Or do end hosts need to perform DNS64 so "DNSSEC for A records only" can be intact?


NOTICE AND DISCLAIMER
This email contains BT information, which may be privileged or confidential. It's meant only for the individual(s) or entity named above. 
If you're not the intended recipient, note that disclosing, copying, distributing or using this information is prohibited. 
If you've received this email in error, please let me know immediately on the email address above. Thank you.

We monitor our email system, and may record your emails.

EE Limited 
Registered office:Trident Place, Mosquito Way, Hatfield, Hertfordshire, AL10 9BW
Registered in England no: 02382161

EE Limited is a wholly owned subsidiary of:

British Telecommunications plc
Registered office: 81 Newgate Street London EC1A 7AJ
Registered in England no: 1800000