Search found 40 matches

by candrews
Thu Sep 22, 2016 8:38 am
Forum: Suggestion Box
Topic: TLSA record support
Replies: 6
Views: 16780

Re: TLSA record support

Any news?

TSLA support would be really nice to have!
by candrews
Thu Sep 22, 2016 8:36 am
Forum: Support
Topic: acc.rollernet.us AAAA record?
Replies: 4
Views: 15838

Re: acc.rollernet.us AAAA record?

I've looked over the PCI standards, and I didn't see anything indicating that IPv6 is restricted or prohibited.

In any case, will acc.rollernet.us be getting IPv6 support at some point?
by candrews
Thu Jun 09, 2016 8:14 am
Forum: Suggestion Box
Topic: TLSA record support
Replies: 6
Views: 16780

Re: TLSA record support

*bump*
by candrews
Thu Jun 09, 2016 8:13 am
Forum: Suggestion Box
Topic: Improve SSHFP record support
Replies: 6
Views: 13975

Re: Improve SSHFP record support

*bump*

This seems like it should be a really easy to change to make... just add a couple new options to the drop down :)
by candrews
Thu Apr 28, 2016 6:41 am
Forum: Suggestion Box
Topic: Improve SSHFP record support
Replies: 6
Views: 13975

Re: Improve SSHFP record support

I just took a look through the PowerDNS source code at https://github.com/PowerDNS/pdns/search?q=sshfp PowerDNS doesn't do any checking on the algorithm or fptype fields of the SSHFP records - it simply requires them to be integers. I also contacted PowerDNS and asked them to add RFC 6594 and RFC 74...
by candrews
Thu Apr 28, 2016 6:28 am
Forum: Suggestion Box
Topic: TLSA record support
Replies: 6
Views: 16780

Re: TLSA record support

Here's an easy to use UI for generating TLSA records: https://www.huque.com/bin/gen_tlsa I think the Rollernet interface would probably use the same fields. Also, for reference, the RFC is https://tools.ietf.org/html/rfc6698
by candrews
Mon Mar 30, 2015 8:44 am
Forum: Suggestion Box
Topic: TLSA record support
Replies: 6
Views: 16780

TLSA record support

TLSA records are part of the implementation of DANE (DNS-based Authentication of Named Entities). These records allow for an alternative (or supplement) to the Certificate Authority system for verifying TLS certificates. The relevant RFC is https://tools.ietf.org/html/rfc6698 - combined with DNSSEC ...
by candrews
Mon Mar 30, 2015 8:40 am
Forum: Suggestion Box
Topic: Improve SSHFP record support
Replies: 6
Views: 13975

Improve SSHFP record support

The SSHFP record interface only supports fingerprint type 1 (SHA-1) - it would be pretty great to also support FP 2 (which is SHA-256). It also only supports algorithms 1 (RSA) and 2 (DSA). It would likewise be nice to support algorithms 3 (ECDSA) and 4 (Ed25519). These supplements to SSHFP are desc...
by candrews
Tue Jan 06, 2015 8:29 am
Forum: Support
Topic: "Invalid content for CNAME record" with valid content
Replies: 1
Views: 10473

"Invalid content for CNAME record" with valid content

I'm trying to add a CNAME record. The content I'm attempting to use is "wyt3gnnohbbpmxpp.onion" which seems valid to me. But, when I submit the form, I get this error: "Invalid content for CNAME record. Please try again." It seems that the form is incorrectly validating the conte...
by candrews
Fri Oct 24, 2014 5:25 pm
Forum: Support
Topic: acc.rollernet.us AAAA record?
Replies: 4
Views: 15838

acc.rollernet.us AAAA record?

acc.rollernet.us currently lacks an AAAA record. I verified this by using the "dig acc.rollernet.us AAAA" command. I'm interested in using the Dynamics DNS API to update by AAAA records automatically. However, without the AAAA record for acc.rollernet.us, that's not so easy. At https://acc...
by candrews
Mon Apr 07, 2014 4:33 pm
Forum: Support
Topic: Insecure mail server configuration
Replies: 9
Views: 19961

Re: Insecure mail server configuration

While I definitely see your point about not understanding completely what the tests test, I think some of the guesses as to what the tests test must be incorrect. If you were correct, then major providers like gmail definitely wouldn't get A grades - but they do https://starttls.info/check/gmail.com...
by candrews
Fri Apr 04, 2014 1:40 pm
Forum: Support
Topic: Insecure mail server configuration
Replies: 9
Views: 19961

Insecure mail server configuration

I came across EFF's Encrypt the Web scorecard, and wondered how Rollernet is doing. https://www.eff.org/deeplinks/2013/11/encrypt-web-report-whos-doing-what I ran starttls.info against my domain (which uses rollernet's mail servers): https://starttls.info/check/integralblue.com The results aren't pe...
by candrews
Wed Dec 29, 2010 12:24 pm
Forum: Suggestion Box
Topic: IPv6 Glue Records
Replies: 10
Views: 21202

Re: IPv6 Glue Records

It appears that your .us nameservers still do not have IPv6 glue - do you know when that may be addressed? In light of your announcement that you've achieved complete IPv6 support http://www.rollernet.us/wordpress/2010/12/introducing-complete-ipv6-support/ (congratulations!), I figured that having g...
by candrews
Mon Apr 05, 2010 9:05 am
Forum: Support
Topic: Submitting Outbound Mail via IPv6
Replies: 6
Views: 16932

Re: Submitting Outbound Mail via IPv6

Are you planning on setting up an address with both IPv4 and IPv6 DNS entries? Currently, my IPv6 connection is a bit unreliable, and since postfix can only use 1 relayhost, I'm forced to use "smtpauth.rollernet.us" - but if there was another name that had both entries, postfix could seaml...
by candrews
Tue Feb 17, 2009 8:53 pm
Forum: Suggestion Box
Topic: IPv6 Glue Records
Replies: 10
Views: 21202

Does nic.us support IPv6 glue records?