[dns-operations] Split DNS: DNSSEC outside and not inside
Mark Andrews
Mark_Andrews at isc.org
Mon Sep 1 23:02:35 UTC 2008
> On Aug 30, 2008, at 11:25 PM, Edward Lewis wrote:
>
> >
> > The one problem with DNSSEC and split-DNS that has not been solved
> > is "how does one deploy DNSSEC on the outside and not on the
> > inside?" (A topic for another thread.)
>
> I've changed the thread subject, are you willing to describe this use
> case in more detail?
>
>
> --Olaf
I suspect that is more about being able to specify that
a zone is *not* secure in the validators configuration
regardless of whether there is a DS in the parent or not.
Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews at isc.org
More information about the dns-operations
mailing list