[Bug 782614] Re: make configuring DNSSEC validation easier
The attachment "0001-Add-a-named.conf.keys-file-for-storing-various- keys.patch" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team. [This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.] ** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
Just a note on this 3 year old bug. The gauge on the root servers has been gauged - DNSSEC was turned on many years ago. You can enable and turn this on by default and the traffic will be neglible. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
Note, I just checked Fedora 15 and the root key is setup similarly and is *enabled* by default as well. So you might just want to do so within Ubuntu as well. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
DNSSEC will place an additional burden on the network and, in particular, the infrastructure based DNS servers. The rationale to have the root key defined here but not used is that will use some of the existing DNS infrastructure (via use of RFC5011) and allow server operators to gauge load. I would recommend that Ubuntu 11.10 ships with DNSSEC available (i.e. root key but disabled) and Ubuntu 12.04 ships with DNSSEC enabled (i.e. root key and enabled by default), so that server operators are not overwhelmed. ** Patch added: "0005-Add-in-the-current-root-.-DNSSEC-key.patch" https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+attachment/2257836/+files/0005-Add-in-the-current-root-.-DNSSEC-key.patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
** Patch added: "0004-dnssec-in-options.patch" https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+attachment/2257805/+files/0004-dnssec-in-options.patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
** Patch added: "0003-Include-the-named.conf.keys-file.patch" https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+attachment/2256349/+files/0003-Include-the-named.conf.keys-file.patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
** Patch added: "0002-Install-the-named.conf.keys-file.patch" https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+attachment/2256307/+files/0002-Install-the-named.conf.keys-file.patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
** Patch added: "0001-Add-a-named.conf.keys-file-for-storing-various-keys.patch" https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+attachment/2256290/+files/0001-Add-a-named.conf.keys-file-for-storing-various-keys.patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
** Changed in: bind9 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/782614/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
** Changed in: bind9 (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
All versions of BIND that Ubuntu has ever published could do with improvements in making DNSSEC easier. However, as noted in the linked instructions, the specific suggestions apply to Bind 9.7+ Which, according to http://packages.ubuntu.com/search?keywords=bind9 is Ubuntu 10.04 (Lucid) and later. Thanks, Anand -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 782614] Re: make configuring DNSSEC validation easier
Thanks for the bug report, which version is this with? Regards chuck ** Changed in: bind9 (Ubuntu) Importance: Undecided => Low ** Changed in: bind9 (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/782614 Title: make configuring DNSSEC validation easier -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
