[dns-operations] Fwd: wrapup of fragmentation/do/tcp discussion requested

[Dave Knight]

On 24-Jun-09, at 12:16 AM, Joe Abley wrote:

>
> On 22-Jun-2009, at 17:03, bert hubert wrote:
>
>>> From: Mark Andrews <marka at isc.org>
>>>> No single referral from a zone signed with NSEC3 though, or using  
>>>> the
>>>> parameters of GOV or ORG.
>>>
>>>      Did you check secure delegations   Secure delegations are
>>>      take less records with NSEC3.  DS + RRSIG v/s  1 or 2 NSEC3
>>>      record + RRSIGs.
>>
>> I can't find a secure delegation to test against, so this may well  
>> be true.
>
> Try AUTOMAGIC.ORG, or SANXION.ORG, or BINDIS.ORG. Those are the  
> three test secure delegations that are present in the ORG zone today.

That would be BONDIS.ORG :)

dave