On 10/2/21 08:14, Bill Woodcock wrote: > We did not use an NTA, but we did flush our cache immediately once > Slack had fixed their problem. I think that’s the right balance of > carrot and stick. Tend to agree with this approach. But I can see how an issue like this could be potentially religious. DNSSEC deployment rate is bad enough, as it is. Mark.