ICANN, who would really like you to enable DNSSEC, has misconfigured DNSSEC on http://icann.com - the domain has signed records, but there is no DS record in the .com zone so the signatures don't actually do anything (except blow up the size of DNS responses, of course)
-
-
Note that I'm not saying nice things about DNSSEC. I'm just saying that I thought ICANN lives at a .org, not a .com. However, I don't really follow where they live, so it was a question.
- 1 more reply
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.