Re: Breaking trusted chain in dnssec

2016-07-13 Thread Georg Kahest
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 07/13/2016 03:16 PM, Mark Andrews wrote:
> 
> In message
> 

Re: which Name sever is selected?

2014-02-28 Thread Georg Kahest
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 02/28/2014 04:14 PM, houguanghua wrote:
 If there is a list of NS records, the local name server uses the
 RTT (round trip time) algorithm to find the fatest, and queries
 that server. But I found it's not right. In the testing, the local
 name server doesn't query the fastest authority name server. Some
 one tells me that if the local name server gets the RTT to one
 remote server is les than 30ms, it will not test RTT to other
 remote servers, even if the RTT is more less. In other words, the
 local server will only query the first remote server with the RTT
 less than 30ms. Who would tell me the truth? Thanks! Guanghua
 
 
 
 
 ___ Please visit
 https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
 from this list
 
 bind-users mailing list bind-users@lists.isc.org 
 https://lists.isc.org/mailman/listinfo/bind-users
 

Why you are assuming that the namserver uses RTT aglorithm to find out
the featest ?



- -- 
Georg Kahest

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Icedove - http://www.enigmail.net/

iQIcBAEBAgAGBQJTEKN9AAoJEFDOdES6xIFjxpoQAJD4ehTrRWtW2Gs6e9cfkIB2
2TB7/y41DnmMtqTyE3aGgyIZwYWGpq5V/XG31jbPBRcW7zhlq7whzjkjpQO8mjAM
HArJR9xY3f7O/USP8axspEUCpYL9mluOeOFf/4QMj4npBIdmhGGju0mDrVntikTb
VwWjhcbLrY3a296/Z71r8YgidmF9md1bgm+HwNkR3+apuLU5YLi/sdDI53Hj0XwQ
oxGp05TA011lT/hH8Acv8QCmoor9GOTsYor6LMBgvTRrTYQMwlM5u7pZTxBIYCDi
c7E3S4aS7CPKBNarlCJsEpd6K8b1eNSsXP9pLN19Ta0L6M0iqx8fVVZ/AIt4JxzP
LigwpOdq9ujcDNMi5LGNAUw8xYlo3TXhBrGx+Gr23I+DwzYhMuy+UIWFS9kZpPwB
NvvgU0hj+XK+zyyNBBeJJRyx7Zw5jWRzH8HUoWEo91jfiMPD/aYEIN05GS5u2vhB
AhbB4EXhjf7kQRJygnzkekNu1i5e925pnGQpcfXygV29iwqzDVFNtWjhP2KooZuL
gWfgUowraVhEtTc+n42S1c0zWhGsYnv/mkArr5Cuj1gzZEZm5m0wDj/PFE/q8pJ4
SYKCZRYqpw+dx1sX3xg7dzE5Xz3aKQA8PymcpPNmpskqF1fLITT8/RAB/cuqVJ24
U81kB7VN5sUhOAZRX4np
=24cf
-END PGP SIGNATURE-
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Disable DNSSEC

2014-01-07 Thread Georg Kahest
On 01/07/2014 05:01 PM, Eric Davis wrote:
 My DNS appliances are not well-suited for this yet, so I want to
 disable DNSSEC for my for domain.  Anyone know the proper steps to
 take and what order if there is any order?  I have a DS record in
 my parent domain.  Do I need to remove that first?  Thanks in
 advance.
 
 Eric
 
 
 
 ___ Please visit
 https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
 from this list
 
 bind-users mailing list bind-users@lists.isc.org 
 https://lists.isc.org/mailman/listinfo/bind-users
 

Yes, first remove the DS from parent zone, then wait for the DS ttl to
expire and then you can start removing DNSKEY's from your zone.

-- 
Georg
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


jabber.isc.org

2013-01-21 Thread Georg Kahest
Hello,

Sorry if this isn't right place to ask this question.

I'm unable to figure out where does one register for jabber.isc.org
account.

It seems that using the xmpp clients register feature, gives me always
result of conflict, is there somekind of webpage for registering or
what could i be missing ?


Georg
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: jabber.isc.org

2013-01-21 Thread Georg Kahest
On 01/21/2013 04:40 PM, Stephane Bortzmeyer wrote:
 On Mon, Jan 21, 2013 at 04:35:39PM +0200,
  Georg Kahest georg.kah...@internet.ee wrote 
  a message of 19 lines which said:
 
 I'm unable to figure out where does one register for jabber.isc.org
 account.
 
 I don't speak for ISC but may I ask why you need one? There are many
 XMPP providers in the world, several of them are gratis (for instance
 Google Talk).


I was interested of idling in bind 10 dev channel.

(http://bind10.isc.org/wiki) bind10 wiki states:

BIND 10 Jabber room, xmpp:bin...@conference.jabber.isc.org, where the
BIND 10 developers hang out

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users