[dns-wg] Re: [enum-wg] Deploying DNSSEC in e164.arpa zone
-
To: Andrzej Bartosiewicz andrzejb@localhost
-
From: Jaap Akkerhuis jaap@localhost
-
Date: Fri, 28 Sep 2007 12:08:38 +0200
-
Cc: enum-wg@localhost, dns-wg@localhost, iab@localhost
this domain is signed, ALL servers respond with DNSSEC data EXCEPT the
RIPE server which do not support DNSSEC....
so if you resolve domains from 8.4.e164.arpa zone using RIPE server, you
can't get DNSSEC enabled answers.
we will remove ns.ripe.net and the problem will be solved today.
Ah, I might have hit that one, I just only tried it once. But there
is at least one lesson in this: you make sure al servers support
DNSSEC when you roll it out.
jaap
|
you are here: RIPE -> RIPE Maillists > Archives
