Need guidance on configuring DNSSEC

2013-10-11 Thread Vishal Gandhi
Hi, We are using BIND v9.8.2. Currently, we are setting up AD infrastructure for internal/local network. We've configured one controller to be the primary for this local zone (fdu.local) for DNS queries. Our primary DNS server (which indeed is a different server) is configured to hold this

Re: Need guidance on configuring DNSSEC

2013-10-11 Thread David Newman
On 10/11/13 7:32 AM, Vishal Gandhi wrote: We are planning to sign local zone (fdu.local). Is it required to sign the parent zone (fdu.edu http://fdu.edu) as well or we can live with it unsigned? What are pros and cons of signing parent zone (fdu.edu http://fdu.edu)? DNSSEC is based on a