[dns-operations] Fwd: wrapup of fragmentation/do/tcp discussion requested
dknight at ca.afilias.info
Wed Jun 24 04:43:54 UTC 2009
On 24-Jun-09, at 12:16 AM, Joe Abley wrote:
> On 22-Jun-2009, at 17:03, bert hubert wrote:
>>> From: Mark Andrews <marka at isc.org>
>>>> No single referral from a zone signed with NSEC3 though, or using
>>>> parameters of GOV or ORG.
>>> Did you check secure delegations Secure delegations are
>>> take less records with NSEC3. DS + RRSIG v/s 1 or 2 NSEC3
>>> record + RRSIGs.
>> I can't find a secure delegation to test against, so this may well
>> be true.
> Try AUTOMAGIC.ORG, or SANXION.ORG, or BINDIS.ORG. Those are the
> three test secure delegations that are present in the ORG zone today.
That would be BONDIS.ORG :)
More information about the dns-operations