[dns-operations] Split DNS: DNSSEC outside and not inside

Mark Andrews Mark_Andrews at isc.org
Mon Sep 1 23:02:35 UTC 2008


> On Aug 30, 2008, at 11:25 PM, Edward Lewis wrote:
> 
> >
> > The one problem with DNSSEC and split-DNS that has not been solved  
> > is "how does one deploy DNSSEC on the outside and not on the  
> > inside?" (A topic for another thread.)
> 
> I've changed the thread subject, are you willing to describe this use  
> case in more detail?
> 
> 
> --Olaf

	I suspect that is more about being able to specify that
	a zone is *not* secure in the validators configuration
	regardless of whether there is a DS in the parent or not.

	Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the dns-operations mailing list