[DNSOP] Re: PQ DNSSEC?

On Mon, 20 Jul 2026 12:16:19 +0200, Joe Abley wrote: 
>On 20 Jul 2026, at 12:14, Libor Peltan <[email protected]> wrote:
>
>> Some people think that substantial switch to TCP would be too expensive for root or TLD operations. But it is still unavoidable.
>
>Perhaps notably, I have not heard anybody who is actually a root server
>operator say that. (Of course I am not claiming that I hear
>everything.)

I think one can go further than Joe's statement.

As of July 2026, two RSOs current support DNS-over-TLS (and therefore
over TCP): USC/ISI (B, see
https://b.root-servers.org/news/2023/02/28/tls.html and
https://b.root-servers.org/news/2026/05/15/tls-and-axfr.html) and US
Army (H, see https://h.root-servers.org/dot_doq.html, also supporting
DNS-over-QUIC).

My understanding is that both currently label DNS-over-TLS service as
secondary to traditional DNS-over-UDP *and* DNS-over-TCP.  But at least
two RSOs do not not regard connections as too expensive to support.

   -John

_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]