[Dnssec-deployment] First signed root zone published
shuque at isc.upenn.edu
Mon Jul 19 19:36:26 EDT 2010
On Sat, Jul 17, 2010 at 09:42:12AM +0200, Patrik Fltstrm wrote:
> Can people that do have problems with fragmented IP packets between
> on the public Internet (i.e. fragmentation between full service
> resolvers and authoritative nameservers) please contact me? Patrik
It's more likely to be encountered for DNSSEC resolvers on home
networks. Should we be worrying about those cases yet? If we assume
that at some point endstations will have either full service
resolvers or validating stubs, then perhaps we need a plan to
figure out how much of a problem there is or isn't. I recently
saw a netalyzer presentation that says 8% of their users were
unable to receive/reassemble fragments.
My personal experience with my home network provider (Verizon
FIOS, Philadelphia) has been positive. No issues with fragmentation.
University of Pennsylvania.
More information about the Dnssec-deployment