Re: Signed root - missing RRSIG for delegation?

2010-07-16 Thread Niobos
That makes it clear for me; thank you very much! As an unrelated side-note: does anyone know when org.'s DS will be included in the root zone? Niobos On 2010-07-16 14:08, Alan Clegg wrote: >> Trying to enhance that: Am I correct to state that it's not possible to >> validate a delegation NS RRse

Re: Signed root - missing RRSIG for delegation?

2010-07-16 Thread Alan Clegg
On 7/16/2010 7:42 AM, Niobos wrote: > On 2010-07-16 12:36, Alan Clegg wrote: >> .net isn't signed, and you don't sign "out-of-zone" data (glue and >> delegation NS records). > > But org. is signed, and gives the same result. .org does not have a DS record in the root yet. This is an example of a

Re: Signed root - missing RRSIG for delegation?

2010-07-16 Thread Niobos
On 2010-07-16 12:36, Alan Clegg wrote: > .net isn't signed, and you don't sign "out-of-zone" data (glue and > delegation NS records). But org. is signed, and gives the same result. But anyway, it basically boils down to: > On 7/16/2010 6:25 AM, Niobos wrote: >> It's probably just my lack of know

Re: Signed root - missing RRSIG for delegation?

2010-07-16 Thread Torsten
Am Fri, 16 Jul 2010 12:25:44 +0200 schrieb Niobos : > Hi, > > It's probably just my lack of knowledge, but there seems to be a > missing RRSIG in the root zone. > > I try to securely resolve example.net. I obviously get a delegation > returned (dig output below), but I can't seem to validate tha

Re: Signed root - missing RRSIG for delegation?

2010-07-16 Thread Alan Clegg
On 7/16/2010 6:36 AM, Alan Clegg wrote: > On 7/16/2010 6:25 AM, Niobos wrote: > >> It's probably just my lack of knowledge, but there seems to be a missing >> RRSIG in the root zone. >> >> I try to securely resolve example.net. I obviously get a delegation >> returned (dig output below), but I can

Re: Signed root - missing RRSIG for delegation?

2010-07-16 Thread Alan Clegg
On 7/16/2010 6:25 AM, Niobos wrote: > It's probably just my lack of knowledge, but there seems to be a missing > RRSIG in the root zone. > > I try to securely resolve example.net. I obviously get a delegation > returned (dig output below), but I can't seem to validate that > delegation. The deleg

Signed root - missing RRSIG for delegation?

2010-07-16 Thread Niobos
Hi, It's probably just my lack of knowledge, but there seems to be a missing RRSIG in the root zone. I try to securely resolve example.net. I obviously get a delegation returned (dig output below), but I can't seem to validate that delegation. The delegation itself (and a direct request for net./