In message <507e212e.5090...@riseup.net>, pangj writes:
> ÓÚ 2012-10-17 10:54, Mark Andrews дµÀ:
> > There is no DS for udp53.org so there is no secure trust chain.
> 
> does this mean .org has not been signed?

No.  It means that there is no DS for udp53.org.

For udp53.org to validate as secure there needs to the following
set to records.

        . DNSKEY
        ORG DS
        ORG DNSKEY
        UDP53.ORG DS     # Missing
        UDP53.ORG DNSKEY

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: ma...@isc.org
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to