[dns-operations] Fwd: wrapup of fragmentation/do/tcp discussion requested

Dave Knight dknight at ca.afilias.info
Wed Jun 24 04:43:54 UTC 2009

On 24-Jun-09, at 12:16 AM, Joe Abley wrote:

> On 22-Jun-2009, at 17:03, bert hubert wrote:
>>> From: Mark Andrews <marka at isc.org>
>>>> No single referral from a zone signed with NSEC3 though, or using  
>>>> the
>>>> parameters of GOV or ORG.
>>>      Did you check secure delegations   Secure delegations are
>>>      take less records with NSEC3.  DS + RRSIG v/s  1 or 2 NSEC3
>>>      record + RRSIGs.
>> I can't find a secure delegation to test against, so this may well  
>> be true.
> Try AUTOMAGIC.ORG, or SANXION.ORG, or BINDIS.ORG. Those are the  
> three test secure delegations that are present in the ORG zone today.

That would be BONDIS.ORG :)


More information about the dns-operations mailing list