[dns-operations] Fwd: wrapup of fragmentation/do/tcp discussion requested

Joe Abley jabley at hopcount.ca
Wed Jun 24 04:16:58 UTC 2009

On 22-Jun-2009, at 17:03, bert hubert wrote:

>> From: Mark Andrews <marka at isc.org>
>>> No single referral from a zone signed with NSEC3 though, or using  
>>> the
>>> parameters of GOV or ORG.
>>       Did you check secure delegations   Secure delegations are
>>       take less records with NSEC3.  DS + RRSIG v/s  1 or 2 NSEC3
>>       record + RRSIGs.
> I can't find a secure delegation to test against, so this may well  
> be true.

Try AUTOMAGIC.ORG, or SANXION.ORG, or BINDIS.ORG. Those are the three  
test secure delegations that are present in the ORG zone today.


More information about the dns-operations mailing list