> And the result being: > > deleg.subzone.test. SOA > SIG SOA by deleg > NS machine1 > NS machine2 > NS machine3 > SIG NS by deleg > KEY key bits #1 > SIG KEY by deleg > SIG KEY by subzone.test. > NXT deleg2.subzone.test. > SIG NXT by subzone.test. > NXT host.deleg > SIG NXT by deleg > > Perhaps there is no need to maintain the "SIG KEY by deleg" and this might > make it cleaner. i think you are right, in this case the "SIG KEY by deleg" does not have to be maintained. grtz Miek NLnet Labs
- Questions on draft-ietf-dnsop-parent-sig-00.txt Edward Lewis
- Miek Gieben
