World's first commercial service for DNSSEC launched in Sweden
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [2007-02-16] .SE (The Internet Infrastructure Foundation) responsible for the Swedish top-level domain on the Internet, today launched .SE-DNSSEC, the world's first commercial service with DNS Security Extensions (DNSSEC) for cryptographically signed name resolving in the domain name system (DNS), in the presence of Dr. Steve Crocker, major Swedish ISP:s, Registrars, Government Agencys, Swedish DNS experts and Swedish banks. http://www.iis.se/english/nyheter/news/2007-02-16?lang=en The first customer registered just minutes after the launch. Anne-Marie Eklund Löwinder Quality & Security Manager .SE (The Internet Infrastructure Foundation) P O Box 7399 103 91 Stockholm Sweden Tel: +46 8 452 35 00, direct: +46 8 452 35 17, mobile: +46 734 315 310 E-mail: anne-marie.eklund-lowinder@iis.se Web: www.iis.se -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBRdXHnaXc8AFCsc+UEQKyQgCgroFV70K5SvVYPKeIzma0+ma2vDIAn2j/ snytxj/Xamt6T8mEL3kqNoRc =oNcW -----END PGP SIGNATURE-----
On Fri, Feb 16, 2007 at 04:02:53PM +0100, Anne-Marie Eklund-Löwinder <Anne-Marie.Eklund-Lowinder@iis.se> wrote a message of 46 lines which said:
-----BEGIN PGP SIGNED MESSAGE-----
Great, next time be sure you sign properly :-) gpg: Signature made Fri Feb 16 16:02:53 2007 CET using DSA key ID 42B1CF94 gpg: BAD signature from "Anne-Marie Eklund-Lowinder <anne-marie.eklund-lowinder@iis.se>"
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Well, that's quite another story. That's probably happens because I am using plain-text signatures together with Swedish diacritics, and on top of that, Outlook. :-) All the best, Anne-Marie
-----Ursprungligt meddelande----- Från: Stephane Bortzmeyer [mailto:bortzmeyer@nic.fr] Skickat: den 16 februari 2007 16:12 Till: Anne-Marie Eklund-Löwinder Kopia: dns-operations@mail.oarc.isc.org; dns-wg@ripe.net; dns-app@lists.cafax.se; sec-heads@romab.com Ämne: Re: World's first commercial service for DNSSEC launched in Sweden
On Fri, Feb 16, 2007 at 04:02:53PM +0100, Anne-Marie Eklund-Löwinder <Anne-Marie.Eklund-Lowinder@iis.se> wrote a message of 46 lines which said:
-----BEGIN PGP SIGNED MESSAGE-----
Great, next time be sure you sign properly :-)
gpg: Signature made Fri Feb 16 16:02:53 2007 CET using DSA key ID 42B1CF94 gpg: BAD signature from "Anne-Marie Eklund-Lowinder <anne-marie.eklund-lowinder@iis.se>"
-----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBRdXM1aXc8AFCsc+UEQKa3gCeMw33Fwvj4+rdusxtyh6AnEYtcCcAnR0b O9L44mp9WrVitq+T7bt9pdR4 =baQI -----END PGP SIGNATURE-----
On Fri, Feb 16, 2007 at 04:25:09PM +0100, Anne-Marie Eklund-Löwinder <Anne-Marie.Eklund-Lowinder@iis.se> wrote a message of 43 lines which said:
Well, that's quite another story. That's probably happens because I am using plain-text signatures together with Swedish diacritics, and on top of that, Outlook. :-)
This one worked, probably because it was sent directly to me, which seems to indicate that the MLM, not your MUA, was the culprit. In any case, it is a good indication of the type of problems we'll have when DNSSEC will be deployed :-)
Stephane Bortzmeyer <bortzmeyer@nic.fr> writes:
On Fri, Feb 16, 2007 at 04:25:09PM +0100, Anne-Marie Eklund-Löwinder <Anne-Marie.Eklund-Lowinder@iis.se> wrote a message of 43 lines which said:
Well, that's quite another story. That's probably happens because I am using plain-text signatures together with Swedish diacritics, and on top of that, Outlook. :-)
This one worked, probably because it was sent directly to me, which seems to indicate that the MLM, not your MUA, was the culprit.
In any case, it is a good indication of the type of problems we'll have when DNSSEC will be deployed :-)
Actually that analogy doesn't hold fully. The PGP signature that were used by Anne-Marie doesn't conform to the IETF-standardized PGP-in-mail format, i.e. RFC 2015/3156. If RFC 3156 were used, the signature should have worked fine, even for non-ASCII characters such as 'ö'. This does not mean that DNSSEC as standardized by the IETF will work, though... ;-) /Simon Btw, the second signature were good here too. It was ASCII only. Let's see if this non-ASCII properly signed e-mail goes through..
participants (3)
-
Anne-Marie Eklund-Löwinder -
Simon Josefsson -
Stephane Bortzmeyer