[afnog] .ZA and DNSSEC (was: .TZ DS records in root zone)

[Mark Elkins]

On Sat, 2013-02-09 at 13:36 -0800, SM wrote:
> Hi Mark,
> At 12:41 09-02-2013, Mark Elkins wrote:
> >side? Take a look at 'www.dnssec.co.za'.
> 
> I don't see any DS record for .ZA in the Root Zone.  Are there any 
> plans for .ZA to support DNSSEC in 2013?

I have no authority to answer that question.

However:
On behalf of UniForum ZA (ZACR), I have been teaching customers how to
implement DNSSEC as part of the Advanced DNS Training course in ZACR
land for the last 5+ years. Coincidently, we are running an Intro DNS
course starting Monday (11th Feb) in Johannesburg followed by an
Advanced DNS course the following week in Cape Town. This is a free
course to participants and is run twice a year - see:
(http://dnstraining.coza.net.za)

I have been running DNSSEC myself for about three years and the majority
of my own domains are signed, both forward (eg 'posix.co.za') and
reverse (124.160.in-addr.arpa). The reverse domains DS records are with
AfriNIC, most of the forwards are with the ISC's DLV system - with the
notable exception of 'dnssec.na' - which has been done correctly (thanks
to Dr Eberhard W Lisse) for the past two years. The DNSSEC (and T-SIG)
services are also available to Posix ISP customers.

> Regards,
> -sm 

-- 
  .  .     ___. .__      Posix Systems - (South) Africa
 /| /|       / /__       mje at posix.co.za  -  Mark J Elkins, Cisco CCIE
/ |/ |ARK \_/ /__ LKINS  Tel: +27 12 807 0590  Cell: +27 82 601 0496

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6147 bytes
Desc: not available
URL: <http://afnog.org/pipermail/afnog/attachments/20130210/2a9b6c5e/attachment-0001.bin>