Re: [sunset4] future of dnssec?

On Wed, Feb 22, 2017 at 4:23 AM Heatley, Nick <nick.heatley@ee.co.uk> wrote:

> Post exhaustion, the majority of cellular networks and some public wifi
> networks will use DNS64.
>
> DNSSEC and DNS64 do not get along. DNSSEC for “A records only” is broken.
>
> Is this the reason why all content must go v6?
>
> Or is the case for DNSSEC still questionable?
>

It is demonstrably true that the case for DNSSEC is questioned by smart
people.

Let's assume that dnssec adds value.

We cannnot do any dnssec without EDNS0.

And, no mobile operating system i am aware of supports EDNS0

So first, we need to solve the EDNS0 issue and the total lack of mobile end
point support

Then, we may discuss how having ipv6 and aaaa is a requirement (thusly no
dns64) for dnssec to function correctly end to end.

Or do end hosts need to perform DNS64 so “DNSSEC for A records only” can be
> intact?
>
>
>
> NOTICE AND DISCLAIMER
> This email contains BT information, which may be privileged or
> confidential. It's meant only for the individual(s) or entity named above.
> If you're not the intended recipient, note that disclosing, copying,
> distributing or using this information is prohibited.
> If you've received this email in error, please let me know immediately on
> the email address above. Thank you.
>
> We monitor our email system, and may record your emails.
>
> EE Limited
> Registered office:Trident Place, Mosquito Way, Hatfield, Hertfordshire,
> AL10 9BW
> Registered in England no: 02382161
>
> EE Limited is a wholly owned subsidiary of:
>
> British Telecommunications plc
> Registered office: 81 Newgate Street London EC1A 7AJ
> Registered in England no: 1800000
> _______________________________________________
> sunset4 mailing list
> sunset4@ietf.org
> https://www.ietf.org/mailman/listinfo/sunset4
>