Re: DNSSEC domain and sub-domains

r...@iastate.edu r...@iastate.edu wrote: If we implement DNSSEC for iastate.edu, admin.iastate.edu and its.iastate.edu, must DNSSEC be implemented for the delegated zones as well? No, in exactly the same way that signing .edu does not mean iastate.edu has to be signed. If there are no DS

Re: DNSSEC domain and sub-domains

On Apr 24, 2014, at 11:01 AM, Tony Finch d...@dotat.at wrote: r...@iastate.edu r...@iastate.edu wrote: If we implement DNSSEC for iastate.edu, admin.iastate.edu and its.iastate.edu, must DNSSEC be implemented for the delegated zones as well? No, in exactly the same way that signing .edu