Post #2194327
2026-05-05 23:21 UTC
@jpmens@mastodon.social
this was why we did an RFC for it... i trust quad9 to follow the full RFC and review regularly to see if it can be taken down. interesting in q8. i thought they auto-NTA'ed on some level of failure.
should make a good dnsoarc talk for someone doing a post-mortem on this.
Replies (1)
-
@jpmens@mastodon.social 2026-05-05 23:28
@paul_ipv6@infosec.exchange The end time of quad9’s NTA is surprising. I realize the can retract whenever, but I vaguely recall RFC specifies a max duration. (BIND: 1 week)