<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Guys<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 17 Dec 2021, at 09.34, Viktor Dukhovni <<a href="mailto:ietf-dane@dukhovni.org" class="">ietf-dane@dukhovni.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><br class=""><blockquote type="cite" class="">On 17 Dec 2021, at 3:28 am, Jan-Pieter Cornet <<a href="mailto:johnpc@xs4all.net" class="">johnpc@xs4all.net</a>> wrote:<br class=""><br class="">I regret to inform you that XS4ALL stopped using DANE, both inbound for <a href="http://xs4all.nl" class="">xs4all.nl</a> and outbound.<br class=""><br class="">The reason is that the XS4ALL systems are being dismantled, and the customers are moving to KPN, who do not use nor publish DANE records.<br class=""></blockquote><br class=""></div></div></blockquote><div><br class=""></div><div>:-(</div><br class=""><blockquote type="cite" class=""><div class=""><div class="">Oh well, perhaps one of these days we can convince KPN to pick up the mantle...</div></div></blockquote><div><br class=""></div><div>KPN are using Halons as far as I recall, so it should be possible. Time for a little Viktor nudging?</div><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class=""><blockquote type="cite" class="">If anyone still has "<a href="http://xs4all.nl" class="">xs4all.nl</a>" in a "strict dane" list, please remove us. I saw a bounce from one.comindicating that possibly one of their systems still expects DANE records for <a href="http://xs4all.nl" class="">xs4all.nl</a>.<br class=""></blockquote><br class="">This is odd, because the whole of DANE is one generally does not<br class="">need to pin local DANE policy, it is enforced when the TLSA records<br class="">are published for the MX hosts, and not otherwise.<br class=""><br class=""></div></div></blockquote><div><br class=""></div><div>We do not have any such local strict dane list - I suspect it might be a case of DNS TTLs, when the TLSA records where removed,</div><div>but I asked Jan-Pieter for at logsnippet off-list in order to investigate.</div><br class=""><blockquote type="cite" class=""><div class=""><div class="">I can't rule out local policy enforcing DANE, but this should only<br class="">happen by prior coordination with and consent of the receiving<br class="">systems. Otherwise, ... expect breakage.<br class=""><br class="">Survey says, ... you're no longer doing DANE:<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span><a href="https://stats.dnssec-tools.org/explore/?xs4all.nl" class="">https://stats.dnssec-tools.org/explore/?xs4all.nl</a><br class=""><br class="">-- <br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>Viktor.<br class=""><br class=""></div></div></blockquote></div><div><br class=""></div><br class=""><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class="">Kind Regards,</div><div class="">Sidsel Jensen</div><div class="">Team manager Mail & Abuse, Systems Engineer @<span class="Apple-converted-space"> </span><a href="http://One.com" class="">One.com</a></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<br class=""></body></html>