[dns-operations] Validating or not validating (ICANN controlled interruption)

Mark Andrews marka at isc.org
Wed Sep 3 23:38:11 UTC 2014

In message <00173023-C534-466E-AB53-A04EEA577463 at nic.br>, Rubens Kuhl writes:
> What I can tell you is that registries and applicants suggested ICANN to
> not require DNSSEC-signign of wildcard controlled interruption due to
> likely differences in resolver behaviour, including some known bugs.
> Rubens

OPTOUT + wildcard really doesn't make sense.  If you are going to
sign a zone with a wildcard record just don't set optout.

That said I've opened a ticket to fix the validator.

Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org

More information about the dns-operations mailing list