[dns-operations] Fwd: wrapup of fragmentation/do/tcp discussion requested
jabley at hopcount.ca
Wed Jun 24 04:16:58 UTC 2009
On 22-Jun-2009, at 17:03, bert hubert wrote:
>> From: Mark Andrews <marka at isc.org>
>>> No single referral from a zone signed with NSEC3 though, or using
>>> parameters of GOV or ORG.
>> Did you check secure delegations Secure delegations are
>> take less records with NSEC3. DS + RRSIG v/s 1 or 2 NSEC3
>> record + RRSIGs.
> I can't find a secure delegation to test against, so this may well
> be true.
Try AUTOMAGIC.ORG, or SANXION.ORG, or BINDIS.ORG. Those are the three
test secure delegations that are present in the ORG zone today.
More information about the dns-operations