[dns-operations] DNSSEC and Split DNS?

[Lutz Donnerhacke]

* Edward Lewis wrote:
> The one problem with DNSSEC and split-DNS that has not been solved is 
> "how does one deploy DNSSEC on the outside and not on the inside?" 
> (A topic for another thread.)

That's easy. I run a Windows DNS inside a customer lan, use AXFR to transfer
the zone to signing server (filter it before signing) and axfr the zone back
to the outside DNS.