← Back to context

Comment by tptacek

15 hours ago

Germany appears to depend on it. Virtually none of North America does. I'm pretty satisfied with how this whole thing shook out!

5 comments

tptacek

Reply
cyberax  14 hours ago

You're wrong. Both .com and .net are signed (`dig RRSIG com.`), and if they screw up, then all the com/net zones will become inaccessible.

  • tptacek  14 hours ago

    Virtually no zones under .com/.net are signed, which was the only point I was making. It has no adoption here.

    • profmonocle  8 hours ago

      Even if example.com is unsigned, the delegation from .com to example.com will still be signed (including an attestation that example.com is unsigned). So lack of DNSSEC adoption by users of the TLD wouldn't save them here.

    • cyberax  12 hours ago

      Sure. But that was not the issue with .de, it has about the same level of DNSSEC adoption as .com

      DENIC screwed up the TLD itself, and .com/.net are just as susceptible.