Re: education.lu

On Mon, Jan 19, 2015 at 04:41:42PM +0000, Viktor Dukhovni wrote:

On Mon, Jan 19, 2015 at 12:15:34PM +0100, Wolfgang Breyha wrote:

...

One of our users tried to send mail to the domain education.lu.

This is one of four related .lu domains with "unusable" TLSA RRsets. I've notified them of the problem multiple times, and they initially (on Dec 10th 2014) said they'd take care of it, but nothing has happened.

dns.lu
education.lu
lmrl.lu
restena.lu

For the record, all four got fixed today. Thanks go to the staff at restena.lu. That leaves just 6 more PKIX-EE(1) holdouts to go.

And the number of validated domains goes up to 976 (though 89 of them have backup MX hosts without TLSA records, and so are not yet completely protected).