Re: [Uta] NEWSFLASH: DANE TLSA records published for web.de!

[Viktor Dukhovni <[e-mail]>]

On Thu, Apr 14, 2016 at 06:38:56PM +0000, Viktor Dukhovni wrote:

> The web.de domain has just published DANE TLSA records for its MX
> hosts.

And today also the rest of the major 1&1 (Mail&Media) email domains:

    gmx.de
    gmx.net
    gmx.com
    gmx.ch
    gmx.at

> This is a major milestone in DANE adoption.  [ IIRC they host
> mailboxes for a substantial fraction of the population of Germany. ]

    https://icannwiki.com/.gmx

    With over 32 million customers Mail&Media covers nearly 50% of
    the German Webmail market. With its brands, Mail&Media is the
    largest free email provider in the German speaking countries
    of Germany, Switzerland, Austria, Luxembourg and Liechtenstein.

Together with web.de this likely makes over 30 million recently
added mailboxes with DANE TLSA records.  DANE is now supported by
the below home internet / email / hosting  providers.

    gmx.at
    gmx.ch
    gmx.com
    mail.com
    gmx.de
    posteo.de
    unitymedia.de
    web.de
    comcast.net
    gmx.net
    t-2.net
    xs4all.net
    xs4all.nl
    transip.nl
    udmedia.de
    nederhost.net

DANE is no longer just at hobbyist domains and a few smaller early
adopters like Posteo and Unitymedia.  This is starting to get
interesting.

While the even larger Gmail, Outlook.com/Hotmail, Yahoo ... are
not in the near term in a position to deploy DNSSEC, I expect that
doing so is simpler for outlook.com, because this domain does not
overlap with major web properties whose scale makes the transition
considerably more difficult.  So it would be great to add Microsoft
to the above list some time in 2017 (or sooner).

DANE for gmail.com is also plausible without impacting all of
Google, but requires moving the MX hosts out of the present
google.com.

-- 
	Viktor.