Search found 31 matches

by candrews
Mon Oct 02, 2017 12:24 pm
Forum: Support
Topic: ip6.arpa primary dns zone
Replies: 1
Views: 40

ip6.arpa primary dns zone

I'm trying to create a new zone: 1.8.2.0.7.0.f.1.0.7.4.0.1.0.0.2.ip6.arpa However, the interface at https://acc.rollernet.us/dns/primary.php under "Add Zone" says "Invalid domain name or zone name format - please try again." when I enter that zone. I know I used to be able to create such zones, as I...
by candrews
Mon Sep 25, 2017 12:18 pm
Forum: Support
Topic: CAA Mandated by CA/Browser Forum
Replies: 6
Views: 389

Re: CAA Mandated by CA/Browser Forum

We have to upgrade all of the background PowerDNS infrastructure before we can add support for CAA records since the version we're currently running doesn't understand it. I don't have an ETA for this, but it's in the queue. Do you have any update as to when CAA records may be available? Thanks aga...
by candrews
Tue May 30, 2017 1:50 pm
Forum: Suggestion Box
Topic: Improve SSHFP record support
Replies: 6
Views: 4863

Re: Improve SSHFP record support

I never noticed the change was done...I stopped checking :D

Thanks!
~Craig
by candrews
Fri May 26, 2017 9:11 am
Forum: Support
Topic: Forums Security issue: HTTPS
Replies: 2
Views: 208

Forums Security issue: HTTPS

http://forums.rollernet.us is served only over HTTP - even authentication credentials are exchanged in clear text. This is *very bad*

Can you please serve the forums over https exclusively to address this security issue?
by candrews
Fri May 26, 2017 9:10 am
Forum: Support
Topic: CAA Mandated by CA/Browser Forum
Replies: 6
Views: 389

CAA Mandated by CA/Browser Forum

Since CAA is now mandated by the CA/Browser Forum, can you please add support for it to the primary DNS configuration interface?

https://blog.qualys.com/ssllabs/2017/03 ... wser-forum
by candrews
Thu Sep 22, 2016 8:39 am
Forum: Suggestion Box
Topic: Improve SSHFP record support
Replies: 6
Views: 4863

Re: Improve SSHFP record support

This really does seem super simple. Can you please make this improvement?
by candrews
Thu Sep 22, 2016 8:38 am
Forum: Suggestion Box
Topic: TLSA record support
Replies: 5
Views: 6906

Re: TLSA record support

Any news?

TSLA support would be really nice to have!
by candrews
Thu Sep 22, 2016 8:36 am
Forum: Support
Topic: acc.rollernet.us AAAA record?
Replies: 4
Views: 7760

Re: acc.rollernet.us AAAA record?

I've looked over the PCI standards, and I didn't see anything indicating that IPv6 is restricted or prohibited.

In any case, will acc.rollernet.us be getting IPv6 support at some point?
by candrews
Thu Jun 09, 2016 8:14 am
Forum: Suggestion Box
Topic: TLSA record support
Replies: 5
Views: 6906

Re: TLSA record support

*bump*
by candrews
Thu Jun 09, 2016 8:13 am
Forum: Suggestion Box
Topic: Improve SSHFP record support
Replies: 6
Views: 4863

Re: Improve SSHFP record support

*bump*

This seems like it should be a really easy to change to make... just add a couple new options to the drop down :)
by candrews
Thu Apr 28, 2016 6:41 am
Forum: Suggestion Box
Topic: Improve SSHFP record support
Replies: 6
Views: 4863

Re: Improve SSHFP record support

I just took a look through the PowerDNS source code at https://github.com/PowerDNS/pdns/search?q=sshfp PowerDNS doesn't do any checking on the algorithm or fptype fields of the SSHFP records - it simply requires them to be integers. I also contacted PowerDNS and asked them to add RFC 6594 and RFC 74...
by candrews
Thu Apr 28, 2016 6:28 am
Forum: Suggestion Box
Topic: TLSA record support
Replies: 5
Views: 6906

Re: TLSA record support

Here's an easy to use UI for generating TLSA records: https://www.huque.com/bin/gen_tlsa I think the Rollernet interface would probably use the same fields. Also, for reference, the RFC is https://tools.ietf.org/html/rfc6698
by candrews
Mon Mar 30, 2015 8:44 am
Forum: Suggestion Box
Topic: TLSA record support
Replies: 5
Views: 6906

TLSA record support

TLSA records are part of the implementation of DANE (DNS-based Authentication of Named Entities). These records allow for an alternative (or supplement) to the Certificate Authority system for verifying TLS certificates. The relevant RFC is https://tools.ietf.org/html/rfc6698 - combined with DNSSEC ...
by candrews
Mon Mar 30, 2015 8:40 am
Forum: Suggestion Box
Topic: Improve SSHFP record support
Replies: 6
Views: 4863

Improve SSHFP record support

The SSHFP record interface only supports fingerprint type 1 (SHA-1) - it would be pretty great to also support FP 2 (which is SHA-256). It also only supports algorithms 1 (RSA) and 2 (DSA). It would likewise be nice to support algorithms 3 (ECDSA) and 4 (Ed25519). These supplements to SSHFP are desc...
by candrews
Tue Jan 06, 2015 8:29 am
Forum: Support
Topic: "Invalid content for CNAME record" with valid content
Replies: 1
Views: 6273

"Invalid content for CNAME record" with valid content

I'm trying to add a CNAME record. The content I'm attempting to use is "wyt3gnnohbbpmxpp.onion" which seems valid to me. But, when I submit the form, I get this error: "Invalid content for CNAME record. Please try again." It seems that the form is incorrectly validating the content - can you please ...