thanks for these responses - I’ll set up a measurement experiment then! Geoff
On 26 Jul 2018, at 5:36 am, Benno Overeinder <benno@NLnetLabs.nl> wrote:
Op 25 jul. 2018 om 21:29 heeft Evan Hunt <each@isc.org> het volgende geschreven:
On Thu, Jul 26, 2018 at 05:08:45AM +1000, Geoff Huston wrote: I have not launched any tests of the root sentinel method as yet - I was waiting to see the fate of the IETF publication process, but is is worth the question on this list: Which resolver vendors have implemented the KSK sentinel and integrated it into deployed resolver code releases?
BIND for one. It's published in all current releases branches (as of 9.9.13, 9.10.8, 9.11.4, 9.12.2, and the 9.13 development branch), and enabled by default.
And Unbound 1.7.1 (released May 3rd), default enabled.
-- Benno
-- Benno J. Overeinder NLnet Labs https://www.nlnetlabs.nl/