internetstandards / toolbox-wiki

Internet.nl toolbox - how-to's for modern mail security standards (DMARC, DKIM, SPF and DANE)
149 stars 21 forks source link

Poposal to mention DNSSEC in Executive Summary #2

Closed desh-se closed 4 years ago

desh-se commented 4 years ago

Regarding the paragraph

...botched deployments not not only harm the domain in question, but also have a deterrent effect on adoption by others.

in the first section, I just want to point of that based on my practical experience, most DANE breakage (which might hamper DANE validation adoption) stemmed from recipient domains with broken DNSSEC (not even running DANE), rather than broken DANE. That being said, I believe that the said paragraph is accurate, and will become increasingly important as DANE usage increases, and DNSSEC development become more mature.