On Jul 21, 2012, at 00:56, Vernon Schryver wrote: > An obvious filter for prospective registrars occurred to me at this, > nearly the end of my week long efforts to get my trivial domains > signed. > > A registrar that does not have DS records for its main domain names > might lack experience dealing with DNSSEC registrations. > > A registrar whose main domains lack AAAA records for any NS names might > lack real world information about IPv6 glue. > > A registrar or reseller that does not have have a WHOIS record with > a minimal set of servers or at least NS records might lack empathy > for those of us who think such things are a good idea. > > You don't need to ask people at the registrar. > `dig example.com ds`, `dig example.com aaaa`, and `dig example.com ns` > can give more authoritative answers than anything people might say. > > Its funny but not amusing that those commands give better results > for the unreal example.com than for any of the registrars that I > recall being mentioned here recently. This should be particularly > embarrassing for one of them. > > I tried several other registrars on > http://www.dotandco.net/ressources/icann_registrars/details/position.en > and found *none* that could pass that trivial filter. > Talk about a race to the bottom!
Apologies if this is an obvious thing, but what is the benefit of publishing a DS record within the zone itself? Shouldn't they be published within the parent zone? Thanks, Jona _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
