Hi Douglas,<br><br><div class="gmail_quote">On Fri, Oct 30, 2009 at 10:53 AM, Douglas Onyango <span dir="ltr"><<a href="mailto:ondouglas@yahoo.com">ondouglas@yahoo.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit;" valign="top">
Rebecca,<br>The findings of the Augmentation study pointed out some problems, including:-<br>1. Fall back to TCP because of truncation<br>2. High Memory usage on servers.<br>3. Increase in latency especially with BIND and big zone files (100,000+) among others.<br>
<br>I do agree that some of the loads/tests are not practicle at the moment and even some can be mitigated, but overall IMHO telling ourselves that we won't be affected would be wrong.<br></td></tr></tbody></table></blockquote>
<div><br>There is much confusion around DNSSEC in Internet Governance circles.<br><br>As Michuki pointed out to Rebecca earlier on the kictanet list, you have to turn on DNSSEC in your nameserver in order to have any effect.<br>
<br>I am of the opinion that African ISPs are going to be using DNS as it is for some time to come. If you don't have DNSSEC enabled, you will use plain old "vanilla" DNS.<br><br></div></div>-- <br>Cheers,<br>
<br>McTim<br>"A name indicates what we seek. An address indicates where it is. A route indicates how we get there." Jon Postel<br>