Are there any ISPs in NZ that have DNS resolvers that do DNSSEC
properly yet? This is important due to all the caching/etc that goes
on.
Last time I checked, XNet/wxc's DNS resolvers don't do it.
On Fri, May 25, 2012 at 3:54 PM, Sebastian Castro
Dear Technical Community,
The next step towards completing the DNSSEC deployment for .nz is to sign the second level domains, thus allowing registrants to enable DNSSEC for their domains. We have prepared a staggered deployment schedule for the unmoderated second level domains, which is available in full at http://nzrs.net.nz/dns/dnssec
As a summary, geek.nz will be the first DNSSEC signed second level domain, closely followed by ac.nz, gen.nz, maori.nz and school.nz, all during June. In July, net.nz and org.nz will be signed, ending with co.nz during early August.
As a reminder, the SRS has been able to receive DS records for domains under .nz since last year, and those records will be included in their respective zone when DNSSEC is fully enable for the second level domain.
We advise against using any of the Second Level Domains DS records as a trust anchors.
If you have any questions around this process, don't hesitate to contact us at support(a)nzrs.net.nz
Kind Regards, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535 _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog