Hi Joe, I am currently writing a discussion doc about this very thing for Telecom, making the system work with as small an impact on our current operational teams is the goal that we have. We are getting set to test it; I am just waiting for the next release of our resolver software before I plunge down that path. I would be interested to hear if anyone else is considering this and what value they place on it at an organization level. Typically this sort of thing isn't a key driver at layer 8 so the value to the organisation in having it done needs to be explained. Regards Paul Tinson Senior Specialist -----Original Message----- From: Joe Abley [mailto:jabley(a)hopcount.ca] Sent: Friday, 23 July 2010 3:36 p.m. To: Paul Tinson Cc: NZNOG List Subject: Re: [nznog] Telecom/xtra DNS Questions Hi Paul, Does Telecom plan to turn on DNSSEC validation with a root trust anchor on any/all of its customer-facing resolvers, or at least begin testing with the goal of doing so? Anybody else? Just curious :-) Joe On 2010-07-21, at 23:59, Paul Tinson wrote:
Inspired by the open nature of Patrick Gilmore's (Akamai) post and having been asked by more than a few people now if we can answer questions about the telecom/xtra DNS servers. I have been answering questions as they present themselves for a while now but I never formally said I would answer questions as they arose or openly invited questions about this.
In the same vein as the Akamai thread if there is anything I can't talk about I will say so, however I will answer what I can honestly and openly. There maybe a delay in some answers if I need to get clarification on our position, I expect some question could be contentious.
So if you have a question please feel free to ask it.
Regards
Paul Tinson Senior Specialist _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog