Re: Comcast DNSSEC

2012-01-11 Thread Livingood, Jason
Very cool, but they haven't signed *all* of them. comcast.net still isn't signed, nor are any of the reverse zones, nor is comcastonline.com (in Comcast's SOAs). We'll be there very soon. Sometimes unplanned work in other areas pulls resources temporarily, conspiring against the best plans. ;-)

Comcast DNSSEC

2012-01-10 Thread Jeremy Bresley
Hadn't seen this mentioned yet. http://blog.comcast.com/2012/01/comcast-completes-dnssec-deployment.html Comcast has signed all their managed domains, as well as deployed DNSSEC resolvers for their customers. And they're encouraging others to make the jump to DNSSEC now as well, especially

Re: Comcast DNSSEC

2012-01-10 Thread Peter Kristolaitis
Wow! Congrats to the Comcast crew, that's absolutely awesome! Definitely interested in hearing any lessons learned that you can share from the exercise. - Pete On 1/10/2012 6:24 PM, Jeremy Bresley wrote: Hadn't seen this mentioned yet.

Re: Comcast DNSSEC

2012-01-10 Thread Cameron Byrne
On Jan 10, 2012 5:11 PM, Peter Kristolaitis alte...@alter3d.ca wrote: Wow! Congrats to the Comcast crew, that's absolutely awesome! +1 Between dnssec and ipv6 Comcast has shown true internet evolution leadership in their *actions*, which really stands out in an industry full of talk. Cb

Re: Comcast DNSSEC

2012-01-10 Thread Scott Schmit
On Tue, Jan 10, 2012 at 05:24:47PM -0600, Jeremy Bresley wrote: Hadn't seen this mentioned yet. http://blog.comcast.com/2012/01/comcast-completes-dnssec-deployment.html Comcast has signed all their managed domains, as well as deployed DNSSEC resolvers for their customers. And they're

Re: Comcast DNSSEC

2012-01-10 Thread Robert Bonomi
From nanog-bounces+bonomi=mail.r-bonomi@nanog.org Wed Jan 11 00:02:13 2012 Date: Wed, 11 Jan 2012 00:58:31 -0500 From: Scott Schmit i.g...@comcast.net To: nanog@nanog.org Subject: Re: Comcast DNSSEC On Tue, Jan 10, 2012 at 05:24:47PM -0600, Jeremy Bresley wrote: Hadn't seen