On Sat, 23 Aug 2008, Mark Andrews wrote: > > > On Fri, 22 Aug 2008, Mark Andrews wrote: > > > David do you have a nameserver we can bounce queries off > > > which has the root zone signed as it would be in production? > > > > VeriSign's root DNSSEC testbed is serving a root zone that is not > > modified before signing. See http://webroot.verisignlabs.com and send > > your DNS queries to root.verisignlabs.com. > > > > Matt > > root-servers.net needs to be configured on to this server. > > % dig ns . +dnssec +bufsize=1460 @root.verisignlabs.com +vc
Done. Note that the root-servers.net zone as configured on root.verisignlabs.com is not signed, since the root-servers.net zone would not be signed, nor would it need to be, if the root were signed. Matt _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
