[dns-operations] DNSSEC at ICANN: still no check?

Matthew Pounsett matt at conundrum.com
Tue Jan 21 15:52:52 UTC 2014


On Jan 21, 2014, at 06:13 , Chris Thompson <cet1 at cam.ac.uk> wrote:

> On Jan 20 2014, Matthew Pounsett wrote:
> 
>> It’s hard to see from outside since its all the same NS set, but I suspect
>> red. and nic.red. are separate zones, but that there is no delegation from
>> red. to nic.red.  I’ve seen that mistake before.  With the same NS set it
>> wouldn’t appear as a problem prior to signing.
> 
> But there shouldn't have been a "prior to signing" state for "red", should
> there? "In the absence of validation" might be an explanation, though.

No, there wouldn’t be a prior to signing state for “red”, but there would be a prior to signing state for the operators.  



More information about the dns-operations mailing list