Question why is dnssec a paid addon and where is dnssec for centos 6.x?

[Linulex]

dnssec is becoming a standard security feature of dns. Why do we have to fork out money to use it?

Whats next? paying for https? ftp a payed add-on?

where is dnssec for centos 6.x/rhel 6.x? The bind version in centos 6 fully supports dnssec.

regards
Jan

 

[IgorG]

DNSSEC is for free and included in all Plesk Web Pro and Host edition licenses. DNSSEC is not included only in Plesk Web Admin licenses. To have/use it with such a license, it's necessary to order and install a DNSSEC extension license.

where is dnssec for centos 6.x/rhel 6.x? The bind version in centos 6 fully supports dnssec.

According to requirements https://docs.plesk.com/en-US/17.0/administrator-guide/dns/using-dnssec-linux.76434/ bind version should be 9.9
On Centos6 it is 9.8.2

 

[Linulex]

[QUOTE="According to requirements https://docs.plesk.com/en-US/17.0/administrator-guide/dns/using-dnssec-linux.76434/ bind version should be 9.9
On Centos6 it is 9.8.2[/QUOTE]

Can you answer the question please?

I didn't asked to quote the docs, i asked why centos 6 wasn't included. Centos 6 is a stable mature OS that is used by a lot of people.

bind 9.8.2 is perfectly capable of handling dnssec, even 9.7 can handle dnssec.

https://www.isc.org/blogs/using-the-root-dnssec-key-in-bind-9-resolvers/

So if it isn't technical, then why was centos 6 left out? That was my question.

I really want to know because i am wondering why features that no one asked for and even less use, like docker and node.js are included and a very usefull security feature like dnssec wasn't.

regards
Jan

 

[IgorG]

Support of DNSSEC in Plesk DNS-server can be implemented in two ways: with BIND automation features (BIND 9.9 and later) or without it.
As implementation without using BIND automation features means a lot of work and high complexity of the solution - the decision was made to use BIND automation features (version 9.9 and later) for implementation of DNSSEC support. On OSes with BIND version 9.8 and earlier - DNSSEC support was not implemented.

 

[Linulex]

Thank you, a valid answer, but a very scary one. What you are really saying is:

If its to difficult, we don't bother.

Maybe hire some programmers from ahead-it. It wasn't to difficult for them, they did it as it should: if plesk 12.5 is supported, it works on every OS 12.5 supports, even centos 5.

http://admin-ahead.com/plesk-extensions/admin-ahead-plesk-dnssec-extension.html

regards
Jan

 

[PitbullOL]

DNSSEC is for free and included in all Plesk Web Pro and Host edition licenses. DNSSEC is not included only in Plesk Web Admin licenses. To have/use it with such a license, it's necessary to order and install a DNSSEC extension license.

According to requirements https://docs.plesk.com/en-US/17.0/administrator-guide/dns/using-dnssec-linux.76434/ bind version should be 9.9
On Centos6 it is 9.8.2

That is not correct, I have an Plesk Web Pro License but when i Install DNSSEC i have an Warning to buy an DNSSEC License why ?

 

[UFHH01]

...
but when i Install DNSSEC i have an Warning to buy an DNSSEC License

Confirmed on Ubuntu 16.04, Plesk Onyx ( Version 17.0.17 Update #6, last updated on Nov 19 ).

dpkg -l | grep bind9 | grep ii
ii  bind9                                  1:9.10.3.dfsg.P4-8ubuntu1.3                            amd64        Internet Domain Name Server
ii  bind9-host                             1:9.10.3.dfsg.P4-8ubuntu1.3                            amd64        Version of 'host' bundled with BIND 9.X
ii  bind9utils                             1:9.10.3.dfsg.P4-8ubuntu1.3                            amd64        Utilities for BIND
ii  libbind9-140:amd64                     1:9.10.3.dfsg.P4-8ubuntu1.3                            amd64        BIND9 Shared Library used by BIND
ii  libbind9-80                            1:9.8.1.dfsg.P1-4ubuntu0.17                            amd64        BIND9 Shared Library used by BIND
ii  libbind9-90                            1:9.9.5.dfsg-3ubuntu0.9                                amd64        BIND9 Shared Library used by BIND

Warning: The Plesk DNSSEC extension requires a license to work. You can purchase the Plesk DNSSEC extension here.

 

[Linulex]

DNSSEC is not included only in Plesk Web Admin licenses. To have/use it with such a license, it's necessary to order and install a DNSSEC extension license.

In other words: if you pay us enough we care about your safety and you get a standard security feature that is rapidly becoming a standard that the whole internet uses, else F.O.

(fo = fork out ... what did you think?)

regards
Jan

 

[PitbullOL]

Now It works yet I have revoke the License ;-)

 

[Linulex]

on another note, just a thought

why not pack powerdns with plesk? dnssec is easy on any system and updating dns records is as easy as writing a few queries because everything is kept in a database.

extra plus: its a lot faster then bind

https://www.powerdns.com/dnssec.html

PowerDNS Authoritative Server 3.2 powers around 90% of all DNSSEC domains in Europe"

there is more then "trumpville" in the world you know


regards
Jan

 

[peraburek]

DNSSEC is for free and included in all Plesk Web Pro and Host edition licenses. DNSSEC is not included only in Plesk Web Admin licenses. To have/use it with such a license, it's necessary to order and install a DNSSEC extension license.

I have Plesk Web Pro licence, still Plesk DNSSEC doesn't work without additional licence, I have tried but it doesn't work
Ubuntu 14.04 and Plesk 17.0.7 update #6

I get this: Warning: The Plesk DNSSEC extension requires a license to work. You can purchase the Plesk DNSSEC extension here.

Is Plesk DNSSEC licence included with Plesk Web Pro edition or Plesk Host edition licences, or not ?

 

[IgorG]

Please reinstall your license using the activation code or try to use "Retrieve Keys". DNSSEC license will be downloaded.

why not pack powerdns with plesk?

Not popular enough - https://plesk.uservoice.com/forums/184549-feature-suggestions/suggestions/6473577-powerdns-support Only 13 votes.

 

[Linulex]

Not popular enough - https://plesk.uservoice.com/forums/184549-feature-suggestions/suggestions/6473577-powerdns-support Only 13 votes.

Aaah, there it is again: the wild inconsistency of plesk we all came to know but absolute not love:

https://plesk.uservoice.com/forums/...lamav-as-module-in-plesk-to-protect-better-th - 407 votes: open discussion

https://plesk.uservoice.com/forums/...4-bring-back-modify-multiple-mailbox-settings - 8 votes: started
https://plesk.uservoice.com/forums/...ns/4263945-sort-domains-by-traffic-disk-usage - 8 votes: planned
https://plesk.uservoice.com/forums/...787407-wordpress-toolkit-for-reseller-account - 9 votes planed
https://plesk.uservoice.com/forums/...4-support-incremental-backup-for-mail-content - 9 votes: started
https://plesk.uservoice.com/forums/...anager-ability-to-upload-file-to-server-by-li - 11 votes: planned

Things like sorting a list are higher valued then a security related things like dnssec.

https and a valid ssl certificate wasn't that popular either when people had to pay for it. But now that google will punish unsecured websites and let's encrypt is free, now everyone wants it.

So, not that popular is proven to be a bogus argument.

and what the uservoice website concerns:

90% of the plesk users don't even know it exists
5% knows it but don't bother because plesk does what is wants without any regards to vote counts (see my proof above)
5% votes or start new

Personally i belong to the 5% that doesn't bother, for the exact reason i gave here.

regards
Jan