Re: DNSSEC status of deb.debian.org

2024-03-03 Thread Andre Rodier
On 03/03/2024 14:06, Andy Smith wrote: Hi, On Sun, Mar 03, 2024 at 09:39:42AM +, Andre Rodier wrote: I was checking the Debian domain, and noticed that it is DNSSEC compliant. However, when I check "deb.debian.org", the DNS validation fails. Things in the debian.org domain are responding

Re: DNSSEC status of deb.debian.org

2024-03-03 Thread Andre Rodier
On 03/03/2024 14:03, Max Nikulin wrote: On 03/03/2024 16:39, Andre Rodier wrote: Is there a stable domain we can use that doesn't rely on a CDN, please ? https://www.debian.org/mirror/list APT relies on GPG signed metadata, so DNSSEC is not necessary for repositories. Thanks, this make

Re: DNSSEC status of deb.debian.org

2024-03-03 Thread Greg Wooledge
On Sun, Mar 03, 2024 at 02:06:00PM +, Andy Smith wrote: > On Sun, Mar 03, 2024 at 09:39:42AM +, Andre Rodier wrote: > > I was checking the Debian domain, and noticed that it is DNSSEC compliant. > > > > However, when I check "deb.debian.org", the DNS validation fails. > > Things in the de

Re: DNSSEC status of deb.debian.org

2024-03-03 Thread Andy Smith
Hi, On Sun, Mar 03, 2024 at 09:39:42AM +, Andre Rodier wrote: > I was checking the Debian domain, and noticed that it is DNSSEC compliant. > > However, when I check "deb.debian.org", the DNS validation fails. Things in the debian.org domain are responding correctly with DNSSEC but deb.debian

Re: DNSSEC status of deb.debian.org

2024-03-03 Thread Max Nikulin
On 03/03/2024 16:39, Andre Rodier wrote: Is there a stable domain we can use that doesn't rely on a CDN, please ? https://www.debian.org/mirror/list APT relies on GPG signed metadata, so DNSSEC is not necessary for repositories.

DNSSEC status of deb.debian.org

2024-03-03 Thread Andre Rodier
Hello, I was checking the Debian domain, and noticed that it is DNSSEC compliant. However, when I check "deb.debian.org", the DNS validation fails. After checking the status using Verisign (https://dnssec-debugger.verisignlabs.com/deb.debian.org), I understand Debian is using a CDN (Content D