On 29 Sep 2020, at 22:04, Michael Catanzaro <mcatanzaro(a)gnome.org> wrote:
On Tue, Sep 29, 2020 at 4:51 pm, Petr Menšík
<pemensik(a)redhat.com> wrote:
> Anyway, we might forgive working dnssec validation. What we cannot
> forgive is lack of DNSSEC information passtrough in 2020.
I agree this should be fixed. See
https://bugzilla.redhat.com/show_bug.cgi?id=1879028.
However, since this only matters for specialized server deployments, and will not matter
for desktop usage or most server deployments, and since the workaround is very easy (just
edit /etc/resolv.conf) it's really extreme to suggest it should be a release blocker
when we have one week to go before final freeze. That timeframe is way too tight.
To step in here, regulatory compliance is a non optional requirement around the world.
Regulatory compliance applies to everybody in a jurisdiction, there is no such thing as a
“specialized deployment” or environments where it “will not matter”. Compliance doesn’t
care about an arbitrary freeze.
This is not a technical decision.
Regards,
Graham
—