marcos, is there a reason you are blacklisting me?
> > operationaly does this presume that the parent
> > can/MUST beable to do a zone transfer
>
> No need for that.
but that will work - yes?
> > or will there
> > be a mutually agreeable, common location where the
> > parent can retreive the key via standard queries?
>
> A query to the DNSKEY RR at the child's apex with the SEP bit set?
does that presume a single DNSKEY?
>
> Best,
> Marcos
.
dnsop resources:_____________________________________________________
web user interface: http://darkwing.uoregon.edu/~llynch/dnsop.html
mhonarc archive: http://darkwing.uoregon.edu/~llynch/dnsop/index.html