Post #2328937
2026-05-09 16:38 UTC
@winfried@fosstodon.org Indeed, and that was what I experienced in the night of Tuesday. But, as NTA are set resolver-side, it’s not something that’ll scale. There are roughly 16 (18?) million .de zones. How many are signed? Shall we say 20%? That leaves a heck of a lot of NTA to be loaded on all resolvers.
Replies (1)
-
@winfried@fosstodon.org 2026-05-09 17:02
@jpmens@mastodon.social yes, you're absolutely right! I have a scenario in mind where I control the clients' resolvers and make my own unsigned domains/services more resilient against such incidents