[dns-operations] DNSSEC at ICANN: still no check?
cet1 at cam.ac.uk
Tue Jan 21 11:13:58 UTC 2014
On Jan 20 2014, Matthew Pounsett wrote:
>On Jan 20, 2014, at 11:37 , 🔒 Roy Arends <roy at dnss.ec> wrote:
>> The problem is indeed the absence of type NS in the type bit maps,
>> as you (and Peter van Dijk) showed in your previous mail.
>It’s hard to see from outside since its all the same NS set, but I suspect
>red. and nic.red. are separate zones, but that there is no delegation from
>red. to nic.red. I’ve seen that mistake before. With the same NS set it
>wouldn’t appear as a problem prior to signing.
But there shouldn't have been a "prior to signing" state for "red", should
there? "In the absence of validation" might be an explanation, though.
Chris Thompson University of Cambridge Computing Service,
Email: cet1 at ucs.cam.ac.uk Roger Needham Building, 7 JJ Thomson Avenue,
Phone: +44 1223 334715 Cambridge CB3 0RB, United Kingdom.
More information about the dns-operations