This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/dns-wg@ripe.net/
[dns-wg] Online DS and signing algorithm test
- Previous message (by thread): [dns-wg] New on RIPE Labs: Finding Open DNS Resolvers on IPv6
- Next message (by thread): [dns-wg] New on RIPE Labs: Recursives in the Wild: Engineering Authoritative DNS Servers
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Roland van Rijswijk - Deij
roland.vanrijswijk at surfnet.nl
Wed Jun 21 12:48:37 CEST 2017
Hi all, (apologies for cross-posting) As some of you may have picked up at the last ICANN DNSSEC workshop or at DNS OARC, we've started a project to track the impact of the Root KSK rollover over the coming months (dubbed the "Root Canary" project, see also https://rootcanary.org for rudimentary info). As a spin-off of this project, NLnet Labs and SURFnet have set up an online test that determines which DS and signing algorithms the resolver(s) configured on your system support. You can find the test here: https://rootcanary.org/test.html The test includes 4 DS algorithms (SHA1, SHA256, SHA512, GOST) and all signing algorithms. It does not do a full NSEC vs. NSEC3 test, as we assume that NSEC3 support likely also means NSEC is supported. Feedback/suggestions are of course welcome , please contact me and/or Willem Toorop at NLnet Labs. Cheers, Roland -- -- Roland M. van Rijswijk - Deij -- SURFnet bv -- w: http://www.surf.nl/en/about-surf/subsidiaries/surfnet -- e: roland.vanrijswijk at surfnet.nl
- Previous message (by thread): [dns-wg] New on RIPE Labs: Finding Open DNS Resolvers on IPv6
- Next message (by thread): [dns-wg] New on RIPE Labs: Recursives in the Wild: Engineering Authoritative DNS Servers
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
[ dns-wg Archives ]