Re: disable dnssec in bind resolver

2010-06-05 Thread Joe Baptista
everybody pays. Since we have Paul's attention here my question is will he incorporate DNScurve into BIND now or does he intend to wait until it becomes an RFC? regards joe baptista ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: [ga] Re: Resolving .gov w/dnssec

2010-04-23 Thread Joe Baptista
AIC is a joke. "I" root server in Beijing is still down. Where is SAIC on that. > > The plan I am putting together for the inculsives will generate some new > fire under the pants of these obstructionists and they will find that a > better mousetrap can be built. > Th

Re: Resolving .gov w/dnssec

2010-04-22 Thread Joe Baptista
Looks like the future of the DNSSEC make work project includes resolution failures here and there. More security - less stability - guaranteed slavery. I wounder if it's a fair trade. we'll see .. regards joe baptista On Thu, Apr 22, 2010 at 10:52 AM, Chris Thompson wrote: > O

Re: OpenDNS today announced it has adopted DNSCurve to secure DNS

2010-02-25 Thread Joe Baptista
On Wed, Feb 24, 2010 at 10:23 PM, Alan Clegg wrote: > Joe Baptista wrote: > > > dnssec-enable yes; > > and > > dnssec-validation yes; > > > > are the defaults since BIND 9.5 > > > > > > How do I turn it off. > > S

Re: OpenDNS today announced it has adopted DNSCurve to secure DNS

2010-02-24 Thread Joe Baptista
On Wed, Feb 24, 2010 at 10:08 PM, Alan Clegg wrote: > > dnssec-enable yes; > and > dnssec-validation yes; > > are the defaults since BIND 9.5 > > How do I turn it off. Thanks joe ___ bind-users mailing list bind-users@lists.isc.org https://lists.is

Re: OpenDNS today announced it has adopted DNSCurve to secure DNS

2010-02-24 Thread Joe Baptista
S. > It's going to be interesting to watch. I guess that depends on if DNSSEC is turned on by default in BIND. Incidentally - is it? regards joe baptista ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: OpenDNS today announced it has adopted DNSCurve to secure DNS

2010-02-24 Thread Joe Baptista
or DNScurve. > Done. regards joe baptista ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: OpenDNS today announced it has adopted DNSCurve to secure DNS

2010-02-24 Thread Joe Baptista
s per day at OpenDNS are DNScurve compatible.The traffic in DNSSEC is chicken feed compared to DNScurve. > When we do, I'll be happy to write the > code. > It's happened - start writing. regards joe baptista ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: OpenDNS today announced it has adopted DNSCurve to secure DNS

2010-02-23 Thread Joe Baptista
being spent on the DNSSEC make work project - time and energy wasted. DNScurve installs - configures and runs. No need for a make work project. agreed? regards joe baptista On Tue, Feb 23, 2010 at 10:28 PM, Michael Sinatra < mich...@rancid.berkeley.edu> wrote: > On 02/23/10 18:31, Joe

OpenDNS today announced it has adopted DNSCurve to secure DNS

2010-02-23 Thread Joe Baptista
Now that OpenDNS the largest provider of public DNS supports DNSCurve http://twitter.com/joebaptista/status/9555178362 Would it be possible to include DNScurve support in bind? thanks joe baptista ___ bind-users mailing list bind-users@lists.isc.org

Re: how to setup a local root nameserver?

2010-02-02 Thread Joe Baptista
e NS the localhost and assign localhost the A record of 127.0.0.1. Or lets say the name server is at 172.16.30.31 then you can do as follows NS any.domain.name any.domain.name A 172.16.30.31 * A 172.16.30.30 That will work too. regards joe baptista ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: how to setup a local root nameserver?

2010-02-01 Thread Joe Baptista
to do that. regards joe baptista If you need help get back to me privately. On Mon, Feb 1, 2010 at 6:50 PM, fddi wrote: > Hello, > I need to setup a local named configuration so that ANY request will be > resolved > to a specific single IP only. > > I mean any kind of DNS resol

DNS inventor Dr. Paul Mockapetris audio interview available at NPR

2009-12-13 Thread Joe Baptista
Since we have been talking about DNS recently here is an audio interview by NPR with DNS inventor Dr. Paul Mockapetris quote: *"A friend of mine said I was smart enough to invent the DNS, but not smart enough to own it," * http://bit.ly/8iSEql This link guaranteed free of evil (

Re: Punycode & nslookup

2009-12-04 Thread Joe Baptista
confusion. > The browser has to understand IDN. Most current browsers do, including (I > believe) IE 7 and later, Firefox 2 and later, and Safari 3 and later. > > Does anyone have a list of idn domains? I'd like to try it out. cheers joe baptista

Re: Punycode & nslookup

2009-12-04 Thread Joe Baptista
does this. I don't know - the last time I tested this was back when Ubuntu 7.?? was released. Don't remember the exact date and the only browser I tested it on was Firefox. Have you tried other browsers? And what browser(s) have you tested this on. You have hit on a very important point

Re: Punycode & nslookup

2009-12-04 Thread Joe Baptista
n the old days. As for you question concerning the browser converting the domain to punycode before asking a nameserver - yes that is what some browsers do. I'm not sure why because it must confuse some users when that happens. regards joe baptista On Fri, Dec 4, 2009 at 9:41 AM, Kai Szyman

Re: Invalid lan. and local. TLDs

2009-08-28 Thread Joe Baptista
root gave an answer instead of NXDOMAIN these queries would go away. regards joe baptista On 8/28/09, John Horne wrote: > > Hello, > > I noticed one of the root servers stats > ( > http://stats.l.root-servers.org/cgi-bin/dsc-grapher.pl?window=604800&plot=qtype_vs_invalid_tl

Re: When dnssec-validation stops working?

2009-08-16 Thread Joe Baptista
best avoided at all costs. cheers joe baptista -- Joe Baptista www.publicroot.org PublicRoot Consortium The future of the Internet is Open, Transparent, Inclusive, Representative & Accountable to

Re: The Year of the Sevenfold Increase

2009-07-30 Thread Joe Baptista
I don't think buddha cares much for bind. cheers joe baptista On Thu, Jul 30, 2009 at 2:26 PM, fakessh wrote: > nb : "Buddha" peace themselve > > On Thu, 30 Jul 2009 13:41:17 -0400, Joe Baptista > wrote: > > You guys get excited over small potatoes. Th

Re: The Year of the Sevenfold Increase

2009-07-30 Thread Joe Baptista
You guys get excited over small potatoes. There are hundreds of millions of potential DLV RRsets. This is not even a drop in the bucket. cheers joe baptista p.s. this message does not imply i support dnssec deployment. dnscurve is the solution to our woes http://bit.ly/pJVq4 On Thu, Jul 30

Re: domain name length

2009-06-29 Thread Joe Baptista
yes - you can do that. and even assign the same NS or other if you want. a domain can be very large to the human eye. I'm not sure how many characters - but more then 200 I think. Go crazy. regards joe baptista On Mon, Jun 29, 2009 at 9:28 PM, Dan Letkeman wrote: > Hello, > >

Re: DNSDigger.com - An announcement and request for feature tips.

2009-06-16 Thread Joe Baptista
could find their national university at digger. My two two cents ;) joe baptista > <http://www.domaintools.com/reverse-ip/> > > Frank > > -Original Message- > From: bind-users-boun...@lists.isc.org > [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Jay Ess

Re: DNSDigger.com - An announcement and request for feature tips.

2009-06-16 Thread Joe Baptista
- so sad it has limited vision of the name space. But I'm sure it will improve. cheers joe baptista - thats one recommend bookmark ;) On Tue, Jun 16, 2009 at 8:19 PM, Jay Ess wrote: > DNSDigger.com - A massive reverse resolver that lets you dig deeper into > the Net. > > DNSD

Re: Unified Root - Domain Configuration Issue

2009-01-19 Thread Joe Baptista
ot; to the end of TM - it works, example: bapti...@baptista-laptop:/tmp/test.temp$ ping tm. PING tm (193.223.78.213) 56(84) bytes of data. 64 bytes from serv213.icb.co.uk (193.223.78.213): icmp_seq=1 ttl=51 time=96.2 ms Like I said - not recommended - but it does work - sort of. regards joe bapt

Re: Unified Root - Domain Configuration Issue

2009-01-19 Thread Joe Baptista
. 86400 IN A 64.251.31.234 TM. 86400 IN A 193.223.78.213 UZ. 14400 IN A 195.158.1.25 WS. 21600 IN A 63.101.245.10 Cheers Joe Baptista On Sun, Jan 18, 2009 at 9:49 PM, Joe Baptista wrote: > > > On Sun, Jan 18, 2009 at 9:39 PM, Mark Andrews wrote: > >> >> >>

Re: Unified Root - Domain Configuration Issue

2009-01-18 Thread Joe Baptista
mmended because it does not always work depending on the application. If the application relies solely on gethostbyname then it will probably work - but some applications do a bit more checking of the domain name and not all applications will allow it. cheers joe baptista -- Joe Baptista www

Re: Unified Root - Domain Configuration Issue

2009-01-15 Thread Joe Baptista
Unifiedroot is a scam. I suggest you do some due diligence on them before you pay them any money. Let them know I gave you this heads up - I'm sure they will appreciate it. cheers joe baptista On Thu, Jan 15, 2009 at 5:48 AM, ozgurs wrote: > We want to buy a unified root domain, &g