Joe Abley <[email protected]> writes: > By this thinking, a signed apex DS RRSet with the meaning discussed > for CDS could be deployed today, with no need for code point > assignment. What am I missing?
Besides the other two comments: DS records are signed with the ZSK, and the CDS document explains why it needs to be signed with the KSK instead (also). -- Wes Hardaker SPARTA, Inc. _______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
