Alexander Mayrhofer <[email protected]> wrote: > > i've been trying to find guidance whether or not the host listed in the > MNAME field of the SOA record is required to have the respective zone > signed (when it is signed on the authoritative servers, and a secure > delegation exists at the parent)?
I believe it is not required. > I understand the MNAME host is not queried under normal operational > circumstances, but is there any formal text? The MNAME host is often used for UPDATE requests. I agree with you that it is reasonable to have a setup where there is a bump-in-the-wire signer between the MNAME server and the public authoritative servers. Tony. -- f.anthony.n.finch <[email protected]> http://dotat.at/ South German Bight, Humber, Thames, Dover, Wight: Southwesterly 6 to gale 8. Rough or very rough. Occasional rain. Moderate or good. _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
