[dns-operations] DNSSEC at ICANN: still no check?

Matthew Pounsett matt at conundrum.com
Mon Jan 20 21:11:36 UTC 2014


On Jan 20, 2014, at 11:37 , 🔒 Roy Arends <roy at dnss.ec> wrote:

> The problem is indeed the absence of type NS in the type bit maps, as you (and Peter van
> Dijk) showed in your previous mail.

It’s hard to see from outside since its all the same NS set, but I suspect red. and nic.red. are separate zones, but that there is no delegation from red. to nic.red.  I’ve seen that mistake before.  With the same NS set it wouldn’t appear as a problem prior to signing.





More information about the dns-operations mailing list