[dns-operations] Fwd: wrapup of fragmentation/do/tcp discussion requested

[Joe Abley]

On 22-Jun-2009, at 17:03, bert hubert wrote:

>> From: Mark Andrews <marka at isc.org>
>>> No single referral from a zone signed with NSEC3 though, or using  
>>> the
>>> parameters of GOV or ORG.
>>
>>       Did you check secure delegations   Secure delegations are
>>       take less records with NSEC3.  DS + RRSIG v/s  1 or 2 NSEC3
>>       record + RRSIGs.
>
> I can't find a secure delegation to test against, so this may well  
> be true.

Try AUTOMAGIC.ORG, or SANXION.ORG, or BINDIS.ORG. Those are the three  
test secure delegations that are present in the ORG zone today.


Joe