DNSSEC being a hot topic currently in the ICANN community, you may find this report useful, because it addresses CPE issues for individual users. This earlier report from the Swedish ccTLD is also an useful piece of information :http://www.iis.se/about/press?id=135 Patrick -------- Original Message -------- Subject: [dns-operations] Announcement: Test Report on DNSSEC impact on SOHO CPE Date: Mon, 15 Sep 2008 15:16:22 +0100 From: Ray.Bellis@nominet.org.uk To: OARC DNS Operations <dns-operations@lists.dns-oarc.net> Dear Colleagues, We would like to announce the publication of a joint study entitled "DNSSEC Impact on Broadband Routers and Firewalls", available for download at: http://download.nominet.org.uk/dnssec-cpe/DNSSEC-CPE-Report.pdf In summary (based on 24 tested units): "... we conclude that just 6 units (25%) operate with full DNSSEC compatibility "out of the box." 9 units (37%) can be reconfigured to bypass DNS proxy incompatibilities. Unfortunately, the rest (38%) lack reconfigurable DHCP DNS parameters, making it harder for LAN clients to bypass their interference with DNSSEC use. These findings, their potential impact on DNSSEC use by broadband consumers, and implications for router/firewall manufacturers, are presented and analyzed in this report. " Ray Bellis Senior Researcher in Advanced Projects Nominet UK Lisa A. Phifer President, Core Competence, Inc. _______________________________________________ dns-operations mailing list dns-operations@lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations