This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/[email protected]/

[dns-wg] DNSSEC: Signed zones list

Previous message (by thread): [dns-wg] DNSSEC: Signed zones list
Next message (by thread): [dns-wg] DNSSEC: Signed zones list

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Max Tulyev president at ukraine.su
Mon Feb 27 18:51:57 CET 2006

> In order to keep the maintaining effort as small as possible, several TLD
> offer a seperate DNS-server which hosts signed subzones. Such servers are
> available for *.fr, *.net and *.com. The *.se zone is signed using the
> standard DNS servers.

So where I can get the keys? ;) I googled, but found nothing :(

> Another trick to delegate the maintaining work is to use a lookaside zone.
> There are two zones out there: dlv.verisignlab.com and dnssec.iks-jena.de.
> A lookaside zone is used by your DNS server to determine a "DS" record for
> an unknown zone. Consequently the lookaside zone does not contain records
> for chained zones.

Understood, nice idea, thank you!

-- 
WBR,
Max Tulyev (MT6561-RIPE, 2:463/253 at FIDO)

Previous message (by thread): [dns-wg] DNSSEC: Signed zones list
Next message (by thread): [dns-wg] DNSSEC: Signed zones list

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

[ dns-wg Archives ]