In message <1f61dd04-14a6-4349-8650-9cf27d27c...@hopcount.ca>, Joe Abley writes : > > On 2009-10-20, at 19:29, Mark Andrews wrote: > > >> ARPA will soon be signed, so I don't think this is much to worry > >> about. If the powers that be finally agree to make NXDOMAIN/NODATA > >> synthesis the default in the upcoming minor DNSSEC revision, this > >> will > >> also help to cut down the number of requests. > > > > And LOCAL.ARPA would need to be a unsigned delegation. > > Could you explain this? The draft under discussion specifies that > LOCAL.ARPA is not to be delegated at all, so your sentence above > confuses me.
For LOCAL.ARPA to be accepted you need a break in the DNSSEC trust chain. You can only break a trust chain at a delegation. > Joe -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
