Sunset planet.torproject.net
While looking into the torproject.net
DNS zone and potential certificate renewal issues due to CAA record tweaks we deployed a few weeks ago, planet.torproject.net
was identified as potentially affected.
@ahf mentioned that it seemed the domain is, in reality, unused, and could be removed. Also, below is a snippet of the IRC conversation, providing some extra context:
lavamind | ahf: are planet.onionize.space and anubis.0x90.dk yours?
ahf | lavamind: yes
lavamind | do you think it would be feasible to add a CAA record in the 0x90.dk zone ?
lavamind | eg. "anubis IN CAA 128 issue "letsencrypt.org;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/<your-accntid>"
lavamind | caa is explained here https://letsencrypt.org/docs/caa/
lavamind | https://adnanthekhan.com/2023/12/20/one-supply-chain-attack-to-rule-them-all/
ahf | lavamind: i'd be more inclined to shut it down
lavamind | ahf: we can do that also, no problem, maybe just create a ticket so that we leave a trace?
ahf | wfm
ahf | we can just say we retire it as it never really got going
ahf | i had forgotten about it until you mentinoed it
ahf | it was something anto and i looked into back when she was around