[dns-operations] Verifying that a recursor is performing DNSSec validation

[Keith Mitchell]

On 07/21/2015 07:48 AM, Edward Lewis wrote:
> Come to think of it, does DNS-OARC have a set of such zones?  I have a
> vague memory that this may have been set up once.  If not, might this be a
> good idea to provide?  (Alongside other test services like reply size as
> described here: https://www.dns-oarc.net/oarc/services/replysizetest)

We have I recall various *signed* zones for testing, but not a
deliberately-always-unsigned zone. We'd be happy to implement that if
the community felt it useful.

Keith


> (An idle suggestion.)
> 
> On 7/20/15, 22:13, "dns-operations on behalf of Frank Bulk"
> <dns-operations-bounces at dns-oarc.net on behalf of frnkblk at iname.com> wrote:
> 
>> Does anyone have an zone that will always remain unsigned?
>> verteiltesysteme.net is going to make one, but if there was a second
>> organization that could provide a zone that will never be signed, that
>> would be great as a control.