Re: slack.com

[Bill Woodcock <woody () pch net>]

We did not use an NTA, but we did flush our cache immediately once Slack had fixed their problem.  I think that’s the 
right balance of carrot and stick. 
    
                -Bill


> On Oct 2, 2021, at 7:30 AM, Mark Tinka <mark@tinka.africa> wrote:
>
>  So, that wasn't fun, yesterday:
>
>     https://lists.dns-oarc.net/pipermail/dns-operations/2021-September/021340.html
>
> We were also hit, given we run DNSSEC on our resolvers.
>
> Interesting some large open resolver operators use Negative TA's for this sort of thing. Not sure how this helps with 
> the DNSSEC objective, but given the kind of pain mistakes like these can cause, I can see why they may lean on NTA's.
>
> Mark.