It looks like fedorapeople.org is validated using dlv.isc.org, you might want to change this now that .org is signed: http://dnsviz.net/d/fedorapeople.org/dnssec/
However, it also looks like repos.fedorapeople.org is unsigned (http://dnsviz.net/d/repos.fedorapeople.org/dnssec/) if I am understanding this correctly, in fact it looks like all *.fedorapeople.org objects are unsigned, or something else is broken, which means that anyone validating using DNSSEC (and there aren't many of us) is unable to visit those pages.
I am a subscriber to the digest only so it may take me some time to reply unless you cc me.
-Erinn
On Wed, 27 Feb 2013 12:15:18 -0500 Erinn Looney-Triggs erinn.looneytriggs@gmail.com wrote:
It looks like fedorapeople.org is validated using dlv.isc.org, you might want to change this now that .org is signed: http://dnsviz.net/d/fedorapeople.org/dnssec/
In the past we have not done this because our registrar didn't support it. ;( We have asked them again...
However, it also looks like repos.fedorapeople.org is unsigned (http://dnsviz.net/d/repos.fedorapeople.org/dnssec/) if I am understanding this correctly, in fact it looks like all *.fedorapeople.org objects are unsigned, or something else is broken, which means that anyone validating using DNSSEC (and there aren't many of us) is unable to visit those pages.
Odd. I am seeing them signed fine here. The link shows them signed as well, unless I am misreading it?
I am a subscriber to the digest only so it may take me some time to reply unless you cc me.
kevin
On 02/28/2013 03:58 PM, Kevin Fenzi wrote:
On Wed, 27 Feb 2013 12:15:18 -0500 Erinn Looney-Triggs erinn.looneytriggs@gmail.com wrote:
It looks like fedorapeople.org is validated using dlv.isc.org, you might want to change this now that .org is signed: http://dnsviz.net/d/fedorapeople.org/dnssec/
In the past we have not done this because our registrar didn't support it. ;( We have asked them again...
However, it also looks like repos.fedorapeople.org is unsigned (http://dnsviz.net/d/repos.fedorapeople.org/dnssec/) if I am understanding this correctly, in fact it looks like all *.fedorapeople.org objects are unsigned, or something else is broken, which means that anyone validating using DNSSEC (and there aren't many of us) is unable to visit those pages.
Odd. I am seeing them signed fine here. The link shows them signed as well, unless I am misreading it?
Ugh, nope you weren't misreading it, looks like the mistake is on my end, sorry for the noise. But do give the registrar a shout to see if you can get signed via org.
-Erinn
infrastructure@lists.fedoraproject.org
-
Erinn Looney-Triggs -
Kevin Fenzi