Re: Disable DNSSEC Validation for selected Domains

2015-01-17 Thread /dev/rob0
-Ursprüngliche Nachricht- Von: Evan Hunt [mailto:e...@isc.org] On Jan 13, 2015, at 2:35 AM, stefan.las...@t-systems.com wrote: I'm just wondering, is an option like unbound's domain-insecure intentionally not implemented in in BIND? Or did just nobody care enough to implement

Re: How to alias a domain

2015-01-17 Thread Tony Finch
On 16 Jan 2015, at 15:36, John j...@klam.ca wrote: DNAME will not work with DNSSEC. Other people have already corrected this statement, but I want to point out there are situations where DNAME makes DNSSEC easier. We use it extensively in our reverse DNS to delegate 128.232.128.0/17 from

Re: DNSSEC

2015-01-17 Thread Tony Finch
Another list which often discusses DNSSEC (though its remit is wider than that) is https://lists.dns-oarc.net/mailman/listinfo/dns-operations Not relevant to the original poster but maybe of interest to those in UK academia is https://www.jiscmail.ac.uk/cgi-bin/webadmin?A0=DNSSEC-DISCUSS Tony.

Re: DNSSEC

2015-01-17 Thread Kevin Oberman
On Sat, Jan 17, 2015 at 9:21 AM, Jeremy C. Reed jr...@isc.org wrote: On Sat, 17 Jan 2015, John wrote: is there a separate DNSSEC mailing list? You may use this bind-users list to discuss DNSSEC. There are other lists for DNSSEC managed outside of ISC and not specific to BIND, such as:

Re: How to alias a domain

2015-01-17 Thread John
On 1/16/2015 10:26 AM, Phil Mayers wrote: Turned out that my (old) router was glitching and losing stuff along the way. New router solved problem! -- John Allen KLaM -- How do you tell when you're out of invisible ink? smime.p7s Description: S/MIME

DNSSEC

2015-01-17 Thread John
is there a separate DNSSEC mailing list? -- John Allen KLaM -- A day without sunshine is like, night? smime.p7s Description: S/MIME Cryptographic Signature ___ Please visit

Re: DNSSEC

2015-01-17 Thread /dev/rob0
On Sat, Jan 17, 2015 at 11:43:33AM -0500, John wrote: is there a separate DNSSEC mailing list? If *you* are using BIND for signing or validation, anything pertaining to DNSSEC is quite relevant here. Google for dnssec mailing list brought up a few possibilities. -- http://rob0.nodns4.us/

Re: DNSSEC

2015-01-17 Thread Jeremy C. Reed
On Sat, 17 Jan 2015, John wrote: is there a separate DNSSEC mailing list? You may use this bind-users list to discuss DNSSEC. There are other lists for DNSSEC managed outside of ISC and not specific to BIND, such as: Dnssec-deployment.org (but I cannot access their mailman webpage

Re: DNSSEC

2015-01-17 Thread John
On 1/17/2015 12:12 PM, /dev/rob0 wrote: On Sat, Jan 17, 2015 at 11:43:33AM -0500, John wrote: is there a separate DNSSEC mailing list? If *you* are using BIND for signing or validation, anything pertaining to DNSSEC is quite relevant here. Google for dnssec mailing list brought up a few

Re: DNSSEC

2015-01-17 Thread John
On 1/17/2015 12:21 PM, Jeremy C. Reed wrote: On Sat, 17 Jan 2015, John wrote: is there a separate DNSSEC mailing list? You may use this bind-users list to discuss DNSSEC. There are other lists for DNSSEC managed outside of ISC and not specific to BIND, such as: Dnssec-deployment.org (but I