DNSKEY and RRSIG

[nils]

Hi tino,

welcome to deSEC!

@peter

You can create a Feature Request issue on our GitHub page, and we will see where the discussion with the community leads. Note, however, that other things on our roadmap have higher priority (such as 2FA, token scoping etc.). We also welcome pull requests, in case you would like to make a contribution for your feature.

This is still true two years later: deSEC is open to discussion the technical details of such a solution on GitHub.

@tino

The CDN must be operated under and controlled by German law. Like yours!

I’m no lawyer, but I do not see a way to operate globally distributed servers exclusively under German law.

@tino

This is due to DSGVO and the ruling of EuGH that IP address are being considered privacy data in DE

Note that there is no guarantee that DNS queries made from German IPs against deSEC name servers will be answered by servers physically located in Germany. In a typical setting, it is the DNS resolver (your ISP, Quad9, Google, or similar) that does such a query, so no end-user IP address is involved.

Cheers,
Nils