On Fri, May 9, 2014 at 6:12 PM, Phillip Hallam-Baker <[email protected]> wrote:
> The simplest way to align things is to simply have a certificate
> issued for the DNSSEC zone KSK and plop that in the log as normal.

Sure, each zone acts as a CA for its children.  That works, I think.

_______________________________________________
Trans mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/trans

Reply via email to