[lacnog] Fwd: Comcast Begins DNSSEC Rollout

[Francisco Arias]

Me parece recordar que al menos un ISP en Suecia (TeliaSonera?) ya
tiene rato validando respuestas con DNSSEC, pero Comcast parece el más
grande en hacerlo hasta ahora.

Saludos,

Francisco.




---------- Forwarded message ----------
From: Livingood, Jason <Jason_Livingood en cable.comcast.com>
Date: 18 October 2010 11:48
Subject: [dns-operations] Comcast Begins DNSSEC Rollout
To: "dns-operations en dns-oarc.net" <dns-operations en dns-oarc.net>


As an FYI, we at Comcast just announced the start of our production
rollout of DNSSEC (see
http://blog.comcast.com/2010/10/dns-security-rollout-begins.html). So
far this year, our production deployment trial has been opt-in only.
Starting today, customer DNS IP addresses will start to change via
DHCP lease updates – all the details are @
http://www.dnssec.comcast.net/.  I'm pretty sure we're the first large
ISP in the U.S. to do so, something we're very proud of. :-)

Also, we shot and have available at new DNSSEC Public Service
Announcement for our customers, shot with G4 Network's "Attack of the
Show" co-host, Kevin Pereira, available at
http://www.youtube.com/watch?v=boyl6o7nkLQ&feature=player_embedded.

Lastly, we have deliberately broken DNSSEC for a domain so we and
others can test what happens when validation breaks, which is at
http://www.dnssec-failed.org.

So while we'll take a few months to very carefully migrate, here come
some end users! So, um, make sure those TLD key rollovers keep working
well. ;-)

Regards,
Jason Livingood
_______________________________________________
dns-operations mailing list
dns-operations en lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations