<div><br></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Apr 27, 2021 at 12:34 PM Eric Germann via NANOG <<a href="mailto:nanog@nanog.org">nanog@nanog.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space"><div><font face="InputMono-Regular"><span style="font-size:14px;font-style:normal">Does anyone have a pointer to a good resource for current best practices for deployment of DNSSEC, preferably newer than RFC6781?</span></font></div><div><font face="InputMono-Regular"><span style="font-size:14px;font-style:normal"><br></span></font></div><div><font face="InputMono-Regular"><span style="font-size:14px;font-style:normal">What algorithms do you typically sign with (RSASHA256, <span>ECDSAP256SHA256, both, something other)?</span></span></font></div><div><span style="font-size:14px;font-style:normal"><font face="InputMono-Regular"><br></font></span></div><div><span style="font-size:14px;font-style:normal"><font face="InputMono-Regular">Feel free to little r me off list if you wish</font></span></div></div></blockquote><div dir="auto"><br></div><div dir="auto">Probably best not to deploy it since it does not solve any practical problems, yet makes huge ddos possible via dns reflection attacks. </div><div dir="auto"><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word;line-break:after-white-space"><br><div>
<div dir="auto" style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;word-wrap:break-word;line-break:after-white-space"><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:15px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><font face="InputMono-Regular">—</font></div><div style="color:rgb(0,0,0);font-size:15px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><font face="InputMono-Regular">Eric Germann</font></div><div style="color:rgb(0,0,0);font-size:15px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><font face="InputMono-Regular">ekgermann (at) <a href="http://semperen.com" target="_blank">semperen.com</a></font></div><div style="color:rgb(0,0,0);font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><font face="InputMono-Regular">LinkedIn: <a href="https://www.linkedin.com/in/ericgermann" target="_blank">https://www.linkedin.com/in/ericgermann</a><br></font></div><div style="color:rgb(0,0,0);font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><font face="InputMono-Regular"><span style="font-size:12px"><br></span></font></div><div style="color:rgb(0,0,0);font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><font face="InputMono-Regular"><span style="font-size:12px">GPG Fingerprint:<span> </span><span style="font-style:normal">89ED 36B3 515A 211B 6390  60A9 E30D 9B9B 3EBF F1A1</span></span></font></div><div style="color:rgb(0,0,0);font-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"><br></div><div><br></div></div><br><br>
</div>

<br></div></blockquote></div></div>