search

KyleSanderson / Tomato

Other
2 stars 1 forks source link

please update root-zone trust-anchors in trust-anchors.conf file #1

Open RoyArends opened 6 years ago

RoyArends commented 6 years ago

Users of your software that enable DNSSEC will not be able to validate DNS after October the 11th 2018.

Your repository contains a trust-anchors.conf file without the new DNSSEC trust-anchors:

trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5

It should also include:

trust-anchor=.,20326,8,2,E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D

More information can be found at: https://www.icann.org/resources/pages/ksk-rollover

Please don’t hesitate to get in touch.

Warmly,

Roy Arends ICANN

KyleSanderson commented 6 years ago

Appreciate the script @RoyArends but not many people used this before it was mainlined. Backporting fq_codel when it was claimed impossible happened as well as inbound policing. This is an "impossible" legacy of the past.

Do you see any active users of this software?