DNSSEC deployment testing and awareness (Was: Re: IPv4 ANYCAST setup)

[regnauld at nsrc.org (Phil Regnauld)]

Randy Bush (randy) writes:
> 
> i.e. what can we do to maximize the odds that the victim will quickly
> find the perp, as opposed to calling our our tech support lines?

	Ah yes, there was the second good reason for actually helping netops
	and security officers :)

	Tools:

	https://www.dns-oarc.net/oarc/services/replysizetest

	https://www.dnssec-deployment.org/wiki/index.php/Tools_and_Resources,
	under troubleshooting:
		http://labs.ripe.net/content/testing-your-resolver-dns-reply-size-issues
		http://secspider.cs.ucla.edu/

	Info sheets:

	http://www.afnic.fr/actu/nouvelles/240/l-afnic-invite-les-responsables-techniques-reseaux-a-se-preparer-a-la-signature-de-la-racine-dns-en-mai-2010
	(click English, top right)

	... plenty of links there too.

	Cheers,
	Phil