[enum-wg] Deploying DNSSEC in e164.arpa zone
Jaap Akkerhuis jaap at NLnetLabs.nl
Fri Sep 28 12:08:38 CEST 2007
this domain is signed, ALL servers respond with DNSSEC data EXCEPT the
RIPE server which do not support DNSSEC....
so if you resolve domains from 8.4.e164.arpa zone using RIPE server, you
can't get DNSSEC enabled answers.
we will remove ns.ripe.net and the problem will be solved today.
Ah, I might have hit that one, I just only tried it once. But there
is at least one lesson in this: you make sure al servers support
DNSSEC when you roll it out.
jaap
[ enum-wg Archives ]