Educause Security Discussion mailing list archives

Re: DNSSEC Deployment


From: Joe St Sauver <joe () OREGON UOREGON EDU>
Date: Mon, 17 May 2010 13:35:57 -0700

John Ladwig <John.Ladwig () CSU MNSCU EDU> asked:

#Not to pile on, exactly, but since the issue's on the table, can anyone
#explain to me what the UI looks like on DNSSEC failures, on, say, Windows
#7 and IE?  For that matter, any OS.

The user sees a domain name resolution failure, indistinguishable from other
errors at the user level.

If you suspect a DNSSEC resolution failure, dnsviz.net is a helpful site
for confirming the issue.

This is a known limitation of DNSSEC.

Regards,

Joe

Current thread: