On Mon, Jul 14, 2014 at 07:14:57PM -0700,
 Paul B. Henson <[email protected]> wrote 
 a message of 56 lines which said:

> I also don't think this is what educause is doing, as I haven't had
> any trouble entering DS records for published but not activated
> KSK's in the past,

You can also note that it is quite common to publish DS without any
matching KSK. It is even documented in RFC 6781, section 4.2.4. For an
actual example, see .UK <http://dnsviz.net/d/uk/dnssec/> (the yellow
path).


_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to