DNS Infrastructure at GitHub

I&#x27;m always interested to know how long these infrastructure changes took from project initiation to launch, and whether it was a dedicated project team or something completed alongside BAU tasks.<p>These details are almost never included in these write-ups. Anyone have any guesses?

I&#x27;m curious if they&#x27;re using DNSSec at all. I notice they&#x27;re using Dynect for this, and in my experience DNSSec and Dyn do not get along (unless you&#x27;re not using any of their special features like geotargeting), so it I&#x27;m interested in hearing how they&#x27;ve managed to get all that working.

I don&#x27;t see any mention of HTTPS support for custom domains. I wonder if this helps move the needle on that. I had moved a lot of project hosting to my paid GitHub account but SSL has become a necessity (SEO and privacy) so I&#x27;m launching sites on Digital Ocean again. I&#x27;d love to have less server config to do though.

&gt;We configured zone stubs in the caching daemon to direct queries locally rather than recurse on the internet.<p>What does this mean?