ICANN ICANN Email List Archives

[whois-rt-draft-final-report]


<<< Chronological Index >>>    <<< Thread Index >>>

No mention of DNSSEC

  • To: whois-rt-draft-final-report@xxxxxxxxx
  • Subject: No mention of DNSSEC
  • From: Mark Andrews <marka@xxxxxxx>
  • Date: Fri, 3 Feb 2012 13:09:50 +1100

One of whois's primary purposes is to provide alternative contact points when 
the network/DNS is down for a domain so that the operators of the domain can be 
informed about problems that may not be visible to them internally.

DNSSEC introduces new ways to cause DNS breakage through mis-management,  lots 
of which is not visible internally to the site.  With the US Government's 
requirement that .GOV zones be signed using DNSSEC we
are seeing a steady trickle of DNSSEC breakages due to the mismanagement of key 
rollovers.  This wouldn't be a major issue except that DOTGOV has decided to 
remove ALL contact details from the GOV whois registry.

[% whois ssa.gov
% DOTGOV WHOIS Server ready
   Domain Name: SSA.GOV
   Status: ACTIVE


>>> Last update of whois database: Thu, 2 Feb 2012 23:05:16 UTC <<<
Please be advised that this whois server only contains information pertaining
to the .GOV domain. For information for other domains please use the whois
server at RS.INTERNIC.NET.
% 

If a site is using a DNSSEC validating resolver then web and email access to 
the zone stops.  It is in situations like this that access to reliable whois 
data is critical to restoring normal communication channels.

Mark






<<< Chronological Index >>>    <<< Thread Index >>>

Privacy Policy | Terms of Service | Cookies Policy