Re: [nznog] The root is now signed!

Anton Smith wrote:

On 28 July 2010 02:00, mailto:nznog-request(a)list.waikato.ac.nz> wrote:

Re: [nznog] The root is now signed!

Hi all,

Hi,

What, if any, impact is there or will there be on zones that are not signed/dnssec compliant?

What is the timeline for cutoff (if any), i.e. will there come a time when any system not compliant will simply be "cut off"?

The protocol was designed for smooth interaction between signed and non-signed zones. The perception I get from the protocol engineers is there is going to be a mixed world. In the near future applications will appear to take advantage of the signed zones (authenticity/integrity), but some will no see advantage and keep it as currently is. Any change to the DNS protocol is particularly careful about backwards compability, unless DNS-NG change things (I heard that term today). cheers,

Regards, Anton

------------------------------------------------------------------------

_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

-- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535