Dns-operations mailing list

[Quinn Wood <wood.quinn.s AT gmail.com>]

On Mon, Feb 10, 2014 at 12:52 PM, Jeff Taylor <shdwdrgn AT sourpuss.net> wrote:
I may also add a section for opennic_blacklist later on if we need to.
>
Sounds like a good idea, in case of (unintentional/unwitting)
abuse-level usages from a registered user.

> Users can log into the members page and view a similar 'wget' line which
> will register the IP address they are currently using.  There are some
> additional commands that can be performed in this wget statement that are
> not listed...
>
Will a web interface to this stuff be built too?

> You may not list more than 10 IPs.
> The netmask may not be any larger than a /28.
>
Will these restrictions be increasable by some kind of vote, for those
that feel they have a reasonable need?

> -- The SSL cert is currently self-signed.  We will get an official cert to
> use when possible.  In the meantime, the "wget --no-check-certificate"
> option is being used to ignore the warning, although the data is still
> encrypted over SSL.
Make sure you're getting sold a cert that uses a hash from the SHA2
family, SHA1 was deprecated over the course of late 2013, but like 98%
of certs out there still use it.