https://hope.net
14-16 August, NYC
Friendly geek in Amsterdam Chaos. Sci fi & open source enthusiast. Holistic ICANN Fellow, .fi 2018 and 2022 ITU group. Sha2017 and why2025 orga. Tschunk! #sailfish #ccc #toool all things dns
We might have met at fosdem, rustfest or Dutch hacker events. :-)
| Website | https://wiki.techinc.nl/index.php/User:Thomascovenant |
| PGP/GPG | 0xac57ee7a695bf419 |
| they | them |
| wiki | https://icannwiki.org/Thomas_Jalkanen |
no thoughts, just meow
I found out that Traficom, who operate the .fi TLD intends to switch off DNSSEC for two weeks in April 2025 (by asking IANA to remove the DS record for .fi) while they are doing an algorithm roll. Somehow they can't do the algorithm roll while staying DNSSEC signed.
Plenty of other TLDs have performed algorithm rollovers while staying DNSSEC signed. This plan is quite careless.
Does anyone know any high profile .fi domain that is DNSSEC signed and uses DANE, CAA, the dns01 challenge for ACME (letsencrypt), or SSHFP?