On Tue, 11 Feb 2014 12:25:10 +1300, Glen Eustace wrote:
perhaps Michael from Unleash might comment as well as unleash.net.nz is signed as well
No problems so far that I can point to as a result of unleash.net.nz being signed. We've been monitoring it and haven't had any oopses with the signing yet that we've spotted (which is not to say that there haven't been a few unfortunate cases more generally, dns-oarc has a few good ones documented). I've had some problems with my personal empire (hotplate.co.nz) but all I can really say of that is "don't run your signing infrastructure on a netbook at your house with no backups". The worst fallout from that was ~ 1 hour where my mailman lists wouldn't talk to Gmail while I replaced DS records, re-signed and went back to ignoring it :) I did have to wait until just as the ZSK was expiring to try minimise the impact of this. Obviously the unleash.net.nz signing is being carried out on slightly more appropriate kit 8^) -- Michael