Page 1 of 1


Posted: Thu Oct 02, 2014 1:08 pm
by kivinen
Does the opi support DNSSEC, i.e. does it verify the dnssec records when resolving host names? I.e. if I configure my mail server does it verify it using DNSSEC?

Does opi run standalone dns resolver, something like bind or unbound or what?

Also it would be nice to have the protected with DNSSEC. It seems .me-top level domain is signed, but is not signed. The seems to be partially signed. There is DNSKEY for the, but there is no DS records in the .com delegating the domain securely to the name servers.

See for current dnssec status of the

Posted: Sat Oct 04, 2014 6:48 am
by tor
Hi kivinen,

DNSSEC is on the roadmap but not yet implemented.

OPI does not run any standalone resolvers (Unbound looked interesting. Unfortunately it has a dep on python 2.7 :( )