On Tue, Jul 6, 2010 at 5:31 PM, Pierre Lebrech <[email protected]> wrote: > OK, good idea. But some parent zones holders check to see if the > corresponding DNSKEY is present in the child zone before accepting > DS records. I have DLV in mind... So in this scenario, DS records can > not be submitted. >
We ourselves (the .be zone) will also verify the DNSKEY if it is present in the child zone before publishing the DS record. As is our cousin zone .eu. So this needs to be configurable behavior. Does anyone know what the policy on this is by the root zone ? Regards, Tim -- Tim Verhoeven - [email protected] - 0479 / 88 11 83 Hoping the problem magically goes away by ignoring it is the "microsoft approach to programming" and should never be allowed. (Linus Torvalds) _______________________________________________ Opendnssec-user mailing list [email protected] https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
