[dns-operations] On-going Internet Emergency and Domain Names

Paul Vixie paul at vix.com
Mon Apr 2 13:46:08 UTC 2007


> > Stephane can probably explain it better.
> 
> In case where it's me :-) I certainly cannot speak for all zone
> operators. AFNIC currently does not sign ".fr" on the regular
> nameservers, only on a separate set of nameservers, not because it is
> a proper way, but because DNSSEC is not a production service for us,
> just an experimentation.

that's a relief.  such an extension would be a very very very bad idea,
even though when i was thinking "DNSTOO" thoughts a couple of years ago
i had NS and DS glued together into an ENS RR.


More information about the dns-operations mailing list