[dns-operations] Validating or not validating (ICANN controlled interruption)

[Mark Andrews]

In message <00173023-C534-466E-AB53-A04EEA577463 at nic.br>, Rubens Kuhl writes:
>
> What I can tell you is that registries and applicants suggested ICANN to
> not require DNSSEC-signign of wildcard controlled interruption due to
> likely differences in resolver behaviour, including some known bugs.
>
> Rubens

OPTOUT + wildcard really doesn't make sense.  If you are going to
sign a zone with a wildcard record just don't set optout.

That said I've opened a ticket to fix the validator.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org