Reputation
5,881
Next privilege 10,000 Rep.
Access moderator tools
Badges
1 6 26
Newest
 Nice Answer
Impact
~113k people reached

6h
answered DNS settings to redirect URL correctly
1d
comment Where is reverse DNS working?
@ElgsQianChen On a technical level it's the same (a reverse zone is a zone like any other, there's nothing different about how delegation works) but the process is usually less formalised, particularly if you're not getting the delegation done directly by the RIR but some smaller portion delegated by your ISP/the LIR.
1d
comment Where is reverse DNS working?
@ElgsQianChen Quite possibly, you can certainly check with them. For a smaller than /24 network some special handling will be required.
1d
comment Can't enable logging for Bind 9 on Red Hat
What did you try?
1d
comment Why should one have a secondary DNS server?
Possibly relevant: serverfault.com/q/710108/183318
1d
answered SPF - Will softfail get inherited when included?
Jul
28
awarded  Nice Answer
Jul
27
awarded  Yearling
Jul
24
answered RapidSSL - Do I really need to include the Root CA's?
Jul
24
comment RapidSSL - Do I really need to include the Root CA's?
I mean the certificates you refer to by name only in your question.
Jul
24
comment RapidSSL - Do I really need to include the Root CA's?
Ok, so the Geotrust cert you talk about is then rather 7359755c6df9a0abc3060bce369564c8ec4542a3 and the Equifax cert is d23209ad23d314232174e40d7f9d62139786633a?
Jul
24
comment Reverse DNS show cname
@MuhammadTayyab Assuming that ns{1,2}.webaservers.com. are your nameservers you should have a zone named 64-27.7.4.62.in-addr.arpa. and in it have records like 88.64-27.7.4.62.in-addr.arpa. IN PTR foo.example.com..
Jul
24
comment RapidSSL - Do I really need to include the Root CA's?
That looks good to me. What were those other certificates? Is the Geotrust cert that you mention de28f4a4ffe5b92fa3c503d1a349a7f9962a8212 or some other certificate? And the Equifax cert, is that something not listed in this chain at all?
Jul
24
comment Reverse DNS show cname
Surely the question seems to be about a RFC2317-style delegation?
Jul
24
answered Reverse DNS show cname
Jul
24
comment RapidSSL - Do I really need to include the Root CA's?
What is the actual chain leading to your certificate? Are those certs part of the chain? Generally speaking you should include all intermediate certs in the chain but never the root. Also, generally if the SSL Labs test has no complaints about missing certificates ("separate download" or something like that?) you probably serve all the certificates that you are supposed to. Can you add the necessary information (both what the actual chain looks like and what the SSL Labs test said) to the question?
Jul
24
comment What kinds of security vulnerabilities does providing DNSSEC expose?
Zone enumeration does not seem like a concern for the service provider, though? (Rather a possible concern for the zone "owner", depending on their views and preferences.)
Jul
23
answered What kinds of security vulnerabilities does providing DNSSEC expose?
Jul
23
comment how can I use openssl to download my ldap cert over port 389 instead of 636 (TLS)?
@ServerFault Are you talking about ldap using the starttls extension rather than ldaps?
Jul
23
comment Real trouble over an expired SSL certificate
The suggestion of modifying the existing certificate chain file instead of concatenating the CA-supplied intermediate certificates assumes that the chain has not changed compared to the old certificate. That's not necessarily the case, especially with the ongoing transition to SHA2-based signatures it's even quite likely that the new certificate has different intermediates.