GMX will start within hours (was: NEWSFLASH: DANE TLSA records published for web.de!)
ietf-dane at dukhovni.org
Thu Apr 21 18:44:30 CEST 2016
On Thu, Apr 21, 2016 at 01:05:11PM +0200, Andreas Pothe wrote:
> it seems that GMX will start publishing DANE TLSA records within the next
> few hours. DNSSec records were published yesterday. web.de had a delay of
> less than 48 hours between publishing DNSSec and TLSA, I think it will be
> the same at GMX (both are part of United Internet).
So to the small number of domains with incorrect TLSA records,
please fix or delete them, otherwise you're just losing email
and causing grief to senders.
If anyone knows the administrators of any of the above, please give
them a not so gentle nudge.
On the DNSSEC front, still waiting on isphuset.no (nudged them
again), and a few others to fix either non-response to TLSA
queries, or incorrect "authenticated denial of existence":
Problem domains | DNS provider
Note that for some of the above providers (like forpsi) the observed
problems are edge-cases, with most domains working fine. Still, it
would be great to have these issues resolved.
More information about the dane-users