nanog mailing list archives

Re: Slack.com DNSSEC on Feb 12th 15:00 UTC


From: William Herrin <bill () herrin us>
Date: Fri, 4 Feb 2022 08:17:48 -0800

On Fri, Feb 4, 2022 at 7:55 AM Bjørn Mork <bjorn () mork no> wrote:
So why the heck do you insist on keeping that wildcard?  Nobody else use
wildcard A records.  There is no reason.  It's a loaded footgun.

Okay... I know some of the bad things that can happen with CNAMEs.
What exactly is the problem with wildcard A records and DNSSEC?

Regards,
Bill Herrin


-- 
William Herrin
bill () herrin us
https://bill.herrin.us/


Current thread: