[Dnssec-deployment] First signed root zone published

[Shumon Huque]

On Sat, Jul 17, 2010 at 09:42:12AM +0200, Patrik Fltstrm wrote:
> Can people that do have problems with fragmented IP packets between
> on the public Internet (i.e. fragmentation between full service
> resolvers and authoritative nameservers) please contact me?  Patrik

It's more likely to be encountered for DNSSEC resolvers on home
networks. Should we be worrying about those cases yet? If we assume
that at some point endstations will have either full service
resolvers or validating stubs, then perhaps we need a plan to 
figure out how much of a problem there is or isn't. I recently
saw a netalyzer presentation that says 8% of their users were
unable to receive/reassemble fragments.

My personal experience with my home network provider (Verizon 
FIOS, Philadelphia) has been positive. No issues with fragmentation.

-- 
Shumon Huque
University of Pennsylvania.