nanog mailing list archives
Re: slack.com
From: Bill Woodcock <woody () pch net>
Date: Sat, 2 Oct 2021 08:14:34 +0200
We did not use an NTA, but we did flush our cache immediately once Slack had fixed their problem. I think that’s the right balance of carrot and stick. -Bill
On Oct 2, 2021, at 7:30 AM, Mark Tinka <mark@tinka.africa> wrote: So, that wasn't fun, yesterday: https://lists.dns-oarc.net/pipermail/dns-operations/2021-September/021340.html We were also hit, given we run DNSSEC on our resolvers. Interesting some large open resolver operators use Negative TA's for this sort of thing. Not sure how this helps with the DNSSEC objective, but given the kind of pain mistakes like these can cause, I can see why they may lean on NTA's. Mark.
Current thread:
- slack.com Mark Tinka (Oct 01)
- Re: slack.com Bill Woodcock (Oct 01)
- Re: slack.com Mark Tinka (Oct 01)
- RE: slack.com Jean St-Laurent via NANOG (Oct 02)
- Re: slack.com Mark Tinka (Oct 01)
- Re: slack.com Bill Woodcock (Oct 01)