Comcast DNSSEC

Jeremy Bresley brez at
Tue Jan 10 23:24:47 UTC 2012

Hadn't seen this mentioned yet.

Comcast has signed all their managed domains, as well as deployed DNSSEC 
resolvers for their customers.  And they're encouraging others to make 
the jump to DNSSEC now as well, especially e-comm/banking sites.

Nice work guys, any of the Comcast guys on the list want to give us an 
idea how much work is involved in this from a large-scale service 
provider perspective to do it?  Any big caveats you encountered that 
people should watch out for?

Jeremy "TheBrez" Bresley
brez at

More information about the NANOG mailing list