Drop Ed25519 SSHFP records

[exim-dns.git] / exim.org.lua

diff --git a/exim.org.lua b/exim.org.lua
index 8c8aa5882c91916a911b7308d9d4594e44a01c90..c81c4318ff942f1d571971d78e181f56d37b1a18 100644 (file)
--- a/exim.org.lua
+++ b/exim.org.lua
@@ -61,10 +61,15 @@ sshfp('hummus', 2, '0b85b8f17ecafcfb0f2d4beae9d74bf37113daac', 1, ttl)
 sshfp('hummus', 2, '2048f5b5ed4471cca229e304c0f8ff166823697504d2d3a28f38f11dac80e1fe', 2, ttl)
 sshfp('hummus', 3, 'd8a0078138279834a2dae8ce9eb408671ba88045', 1, ttl)
 sshfp('hummus', 3, '20fb937eb9b87aec566dff0a97b31963a3f5dd7cbba9e205574ebc676e842dff', 2, ttl)
-sshfp('hummus', 4, '6c6eaf95c8242ea53791942717b0ed40e9e5db92', 1, ttl)
-sshfp('hummus', 4, 'bf4b9376f5fffe2b59a0948638df3b4d77d02da2cb8c44cbc90d0bf174f22e5e', 2, ttl)
+-- 2016-10-27: apparently LuaDNS needlessly "validate" by checking the algorithms against an outdated whitelist,
+--             such that we can't have the Ed25519 fingerprints from RFC7479 (March 2015).
+-- sshfp('hummus', 4, '6c6eaf95c8242ea53791942717b0ed40e9e5db92', 1, ttl)
+-- sshfp('hummus', 4, 'bf4b9376f5fffe2b59a0948638df3b4d77d02da2cb8c44cbc90d0bf174f22e5e', 2, ttl)
 
 -- Google Gmail Postmaster Tools (this one for Phil):
 cname('nwkjs7zfnln6',  'gv-3umn6e3uwnaqo5.dv.googlehosted.com',        ttl)
 
+-- dummy changes here to this record, to try to nudge propagation
+txt('_dummy-foo', '12345', ttl)
+
 -- end