[dns-wg] DNSSEC: Signed zones list
- Previous message (by thread): [dns-wg] DNSSEC: Signed zones list
- Next message (by thread): [dns-wg] DNSSEC: Signed zones list
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Max Tulyev
president at ukraine.su
Mon Feb 27 18:51:57 CET 2006
> In order to keep the maintaining effort as small as possible, several TLD > offer a seperate DNS-server which hosts signed subzones. Such servers are > available for *.fr, *.net and *.com. The *.se zone is signed using the > standard DNS servers. So where I can get the keys? ;) I googled, but found nothing :( > Another trick to delegate the maintaining work is to use a lookaside zone. > There are two zones out there: dlv.verisignlab.com and dnssec.iks-jena.de. > A lookaside zone is used by your DNS server to determine a "DS" record for > an unknown zone. Consequently the lookaside zone does not contain records > for chained zones. Understood, nice idea, thank you! -- WBR, Max Tulyev (MT6561-RIPE, 2:463/253 at FIDO)
- Previous message (by thread): [dns-wg] DNSSEC: Signed zones list
- Next message (by thread): [dns-wg] DNSSEC: Signed zones list
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
[ dns-wg Archives ]