I tried using a mix of algorithms. I cannot seem to mix algorithms when signing zone to use NSEC3<br><br># 1. Generate RSASHA1 keys<br>fbsd63# dnssec-keygen -a RSASHA1 -b 1024 <a href="http://testnsecnsec3.org">testnsecnsec3.org</a><br>
fbsd63# dnssec-keygen -a RSASHA1 -b 4096 -f KSK <a href="http://testnsecnsec3.org">testnsecnsec3.org</a><br><br># 2. Generate NSEC3RSASHA1 keys<br>fbsd63# dnssec-keygen -a NSEC3RSASHA1 -b 1024 <a href="http://testnsecnsec3.org">testnsecnsec3.org</a><br>
fbsd63# dnssec-keygen -a NSEC3RSASHA1 -b 4096 -f KSK <a href="http://testnsecnsec3.org">testnsecnsec3.org</a><br><br># 3. Copy all DNSKEY recods in the zone file.<br>fbsd63# cat Ktestnsecnsec3.org.+00*.key >> testnsecnsec3.org.db<br>
<br># 4. sign the zone with both the keys and opt for NSEC records: generates the signed domain<br>fbsd63# dnssec-signzone -o <a href="http://testnsecnsec3.org">testnsecnsec3.org</a> -k Ktestnsecnsec3.org.+005+64081.private -k Ktestnsecnsec3.org.+007+19293.private testnsecnsec3.org.db Ktestnsecnsec3.org.+005+64917.private Ktestnsecnsec3.org.+007+56312.private<br>
<br># 5. sign the zone with both the keys and opt for NSEC3 by using option -3: does not generate a signed domain.<br># indicates error: NSEC3 generation requested with NSEC only DNSKEY<br>fbsd63# dnssec-signzone -o <a href="http://testnsecnsec3.org">testnsecnsec3.org</a> -k Ktestnsecnsec3.org.+005+64081.private -k Ktestnsecnsec3.org.+007+19293.private -3 bb6945e66c82b958763f5fb69f745a78 testnsecnsec3.org.db Ktestnsecnsec3.org.+005+64917.private Ktestnsecnsec3.org.+007+56312.private<br>
<br>dnssec-signzone: NSEC3 generation requested with NSEC only DNSKEY<br><br>Am I doing something wrong in step 5 or is it not possible to do (5)?<br>With step 4, I got a signed domain inline with what you have attached in your email.<br>
<br>thanks,<br>Ravi.<br><br><div class="gmail_quote">On Thu, Sep 10, 2009 at 11:35 AM, Edward Lewis <span dir="ltr"><<a href="mailto:Ed.Lewis@neustar.biz">Ed.Lewis@neustar.biz</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="im">At 11:12 -0700 9/10/09, Ravi Kondamuru wrote:<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
I understand that on an authoritative server ZoneA can be signed using RSASHA1<br>
algorithm and ZoneB using RSASHA1-NSEC3-SHA1, but it is not possible to have<br>
ZoneC signed using both RSASHA1 and RSASHA1-NSEC3-SHA1. ZoneC has to choose<br>
one of the two.<br>
</blockquote>
<br></div>
You can't do NSEC and NSEC3 in the same zone (because a server has to know how to handle a negative response situation and that is keyed on the presence/abscence of an NSEC3PARAM RRset at the apex).<br>
<br>
But you can mix algorithms. Note that the only difference between RSASHA1 and RSASHA1-NSEC3 is the algorithm number.<br>
<br>
See the example below:<br>
<br>
<br>
$ cat tld..signed<br>
; File written on Thu Sep 10 14:32:59 2009<br>
; dnssec_signzone version 9.6.1<br>
tld. 518400 IN SOA a.gtld.tld. hostmaster.tld. (<br>
1000000 ; serial<br>
900 ; refresh (15 minutes)<br>
900 ; retry (15 minutes)<br>
604800 ; expire (1 week)<br>
86400 ; minimum (1 day)<br>
)<br>
518400 RRSIG SOA 5 1 518400 20091010173259 (<br>
20090910173259 48162 tld.<br>
fh35qvcxhAWFyJtZ80Y2fLVvTsnKNTYvtmso<br>
WxhnyQN36hEYtdsmRu3J5RxFAhHGkNdyc1hN<br>
FeL6qLWqU8BSgUjZ1g0X9jz/fypUV99dOYlq<br>
UvWzLVqdsVeAMcWXMcH7z4Cqhe9Jo5qQR5Yg<br>
VgUiK5ln9Ud59vc7Ap9xL1KlA1o= )<br>
518400 RRSIG SOA 7 1 518400 20091010173259 (<br>
20090910173259 55238 tld.<br>
GtGMOrtyC7k1Jyc1dHJhhXRvv3NpjU5ugIki<br>
maRaua/+L3Rt9GzLJZUhoYLus6k1gSmECorW<br>
XB6JL65Qw5Hg1bLSQgHgcUaZVdlAs1oNOTPs<br>
Ourx2Hrfuvr9pFuiXmGqKCE1QjO0zk7w3WF7<br>
QdOPTmQGVlgQCVu9ZgAx5OVpHuc= )<br>
518400 NS a.gtld.tld.<br>
518400 RRSIG NS 5 1 518400 20091010173259 (<br>
20090910173259 48162 tld.<br>
ciwi1WzgCMY2nFtL9U8IlSLuPpsdY0FpQoEI<br>
Wn6YyyV3MMBl4j6egSaBmY+SU3U+pznEIN/k<br>
oca3y12e6V2DhhRn86TF9VpM8s6yYy56/0ee<br>
JgGVkY+IeN4tge9DkzF/MLSU0zpGKehQ+Dxa<br>
DCbnANmgIRWRxJ5/XUqg484BOWw= )<br>
518400 RRSIG NS 7 1 518400 20091010173259 (<br>
20090910173259 55238 tld.<br>
OHnoZEiREaVkx5MpVGGyXkEY6XVKk0mE6u4L<br>
rxy62LcZ0ftnliF8Egcqhh1RQ3PgK+B/BYO5<br>
ahWPhxeHYrjASTdNwFx6T5OaOsPOj1jc6FQl<br>
V8C9COLxxEy0pQJ9UetAeQN3de93IaEY0ypK<br>
ja3Hw2EuPZ2IKkPpxyvnY1rChDs= )<br>
86400 NSEC a.gtld.tld. NS SOA RRSIG NSEC DNSKEY<br>
86400 RRSIG NSEC 5 1 86400 20091010173259 (<br>
20090910173259 48162 tld.<br>
VTmcj+236AX9LEBue6UU+7PdKTBFLwaRd8aY<br>
PBP9NUZV64NR0XhCwm0N6jGbQ1DviiNUlhs6<br>
fDXKNEGTMBnuh9u2fJkIObw8EZWL3aOORxP3<br>
qUWL/17pY7yVzx+3ZinfPH8esQlHCvdmOUeQ<br>
vPZAAGaDJ/BNuomochdtG543oSE= )<br>
86400 RRSIG NSEC 7 1 86400 20091010173259 (<br>
20090910173259 55238 tld.<br>
kfi8Kjvbtbtx9abMogxa6eUAuegbZ5uLF17M<br>
9n/VK53tF00u+0Vle1rNykrFX/h5RHgEnXe+<br>
HZOxb6p2zv9LBvqsOGjFSLAa5aKOXps9lnph<br>
Rd7R0xApIJS1aw/Y1ddQQmepBR9uOfiGb2x5<br>
VGonEBDnIUUzQX/nv5RN66nJtc8= )<br>
518400 DNSKEY 256 3 5 (<br>
BEAAAAO3njuWLL8PY7fdvDBHovnMl8EcuKik<br>
2aza6L8nY+n/gAFCtdNSqXxVsadSkHNsPS6K<br>
lDD+ZHhXirxL8SmIS3V/2fSljizpOuJNwYiV<br>
FDcrTaIoaZLFiCoZkFj0BjB6lQVimdJ+2gGH<br>
zeWTrSVkrVlSRFCWJk8c3CiFXbwQG5/aBw==<br>
) ; key id = 48162<br>
518400 DNSKEY 256 3 7 (<br>
AwEAAfmMbaj/5Azq3CQuI50q39Dbs60HD70a<br>
1kgtt8LlloWksK6GJbLR6fLSGyvqixesMIdw<br>
4Wr7REdkkJ73TtqEAAZi12+gNTwi7IxigI2x<br>
N9NeYufcNJ8RcVyEk217Y+hxI/yxm4I9jtCO<br>
r86uRGuj8bv+6Tka6lC6Uz9OE2Gh4ZpN<br>
) ; key id = 55238<br>
518400 DNSKEY 257 3 5 (<br>
BEAAAAOz+tAF3EEj0lVu2q7/N3Hdn+Yziv7T<br>
42BGEi2hWohJ9IHOHoHnKRvp2+VzphrFl/t0<br>
6IUtLxbSK23e4O2zG1NJ6jhRAM1JOKnC5N2S<br>
kOT0AGuH575HSfm5RJdPapcdVpJnl4snCwbY<br>
07Ye9CogyFEKHlKagagsqdW1GL4gMcrxG9V9<br>
E5E0g4eNhiLCAZ81suQWVuGnaphGF3MhzX5T<br>
UGdY5H82ZWOyY7XN7hCDtB/DXasRATJurDJD<br>
VAEi7zn7yZdTCpTl1ndrcSwUii4ZliiGIaQG<br>
GWmj5WiZk1Wbpaf1pWgkrcyB7Jftdjkted2u<br>
tJGwTzNxPM7cpzcYkEptk2v5<br>
) ; key id = 15178<br>
518400 DNSKEY 257 3 7 (<br>
AwEAAdgPOvdRGgmJxIyZc3XEcLKXFFgRFFtD<br>
IvBqJOVkj6jGKmelWypWgqvcn3YD5nqCxhe5<br>
1wvgxPd1bjYvSDiI61Kvd6vc21eR3Z641mMM<br>
jGEv8NyJv53nlrXPIUrPGATlh6wJNOGZ/WVJ<br>
hhIRrxNBHazKMqXWaRw+lG4GvEtz4h48+k3u<br>
QfDr+gk1Z4m7Jf4mp3XRXZYA50Fm5iGxybjb<br>
0ecigAlLbgdtAnoXhEOUNY/ZQsYKhFA//z1y<br>
wvhvr3/ujXULkkP5uDbSIHqObqjfMRu6Y/Aa<br>
CyY/pr80sbsMF/tabd5xnR5/Du32XJMpM9Tw<br>
NWv+aOTc2cGjNUIiyxcc3NE=<br>
) ; key id = 25044<br>
518400 RRSIG DNSKEY 5 1 518400 20091010173259 (<br>
20090910173259 15178 tld.<br>
a9OjS6kmFc1pSYLTMi1j5xbBG+3SgN/WJ25R<br>
K7NidX0CMhyMtNHeA5rqyI1E6pTasTqeePOj<br>
jsEW6H8YuZ2OgJmulpZzIDXAGJlY0qVM01zd<br>
QSE4mzk20WXyiOykZhORB7OnPupNwmrWCZmv<br>
JWOPb/Eht5UVc9cghMepr+CQ8DI2qrlCtfJ7<br>
Up5Pa1RS5b2UTC0fKncXZwnRZXI/qGuDN1Sw<br>
cmlX5PlRx5D0hywGEJnK9MbgiR3Ds0zfqsM/<br>
d+DApbarBNHIyR9f0Wj6cBun6yd8lpzAzCll<br>
kqLquzmGidqqzITpWXnFZ51Ibt2RoFx0c/7Y<br>
N3vXlbCxqbYRNt7ACQ== )<br>
518400 RRSIG DNSKEY 5 1 518400 20091010173259 (<br>
20090910173259 48162 tld.<br>
KT7h9cexgtvAXWAnZsOmNIpta/ch1D+O1Y2V<br>
ghBrJoZ7p9czxxYDuA9ice5W/LAq3w0W4PKf<br>
fbgTYQMZdizLfsbk0ums/ddymAO+jnjT+QuF<br>
X23sf0P3a/DazSnMLWgvliadc0YECW8P30E7<br>
9R+6VkRlyrXpa5T0cJKaG6BMZSE= )<br>
518400 RRSIG DNSKEY 7 1 518400 20091010173259 (<br>
20090910173259 25044 tld.<br>
PhbUW1d/o4j4C9BgkG52sMsALsQBvVEPAWow<br>
D4v8eq8ggtq3owtwT0jkSx0MXXec+KCQ8yfm<br>
5zHx3VHKuFThJlJGqAPk90OFO0ylGF7fYY9f<br>
E0zP+7RbvjBksYfoi7axaxpW8lEfv8McZbNC<br>
bSdlRDuG3lwh9R2DBceImmnFHlGoiWzpuMzH<br>
kSKxNXQ/P4jfAViKagNEaza0I6HH+852a/gy<br>
IWNW5HK+QhqYjnXuxvYASku83NUNKedhUR9H<br>
HLKfyT6i+ROUF1eFuGdDOLYa9AQ5duxWy3M6<br>
Z9DnbcYvKvYiGgLEAdaLQpzxeMV9PkcvFd+b<br>
FFoKAEAUMs+btF/H9Q== )<br>
518400 RRSIG DNSKEY 7 1 518400 20091010173259 (<br>
20090910173259 55238 tld.<br>
GLYtiHmXlGDDAxtLKRmMCD4K6FT/Tw8vDciv<br>
7LX78mQsU7OjSIjR0PhZYRlu7DgZWUu72dNp<br>
chymfoRfOHOApajwLXs9FqV5s5gKJnXSZ1nc<br>
AZ9TJZERQgP27rhrPfouVEaLVWM21AYLB9No<br>
/oJD25RwJi3jBwrSTNFrjD3Eh8E= )<br>
ns0.n0.tld. 518400 IN A 127.0.0.1<br>
ns1.n0.tld. 518400 IN A 127.0.0.1<br>
ns0.n1.tld. 518400 IN A 127.0.0.1<br>
ns1.n1.tld. 518400 IN A 127.0.0.1<br>
a.gtld.tld. 518400 IN A 127.0.0.1<br>
518400 RRSIG A 5 3 518400 20091010173259 (<br>
20090910173259 48162 tld.<br>
SZ6j3Ldw3IDZUTG9bESIfA+h7czdBsNz1ssm<br>
FZvJG3y6L2GBQxuZz2mC56UXtdoClXbRp5sS<br>
1rgcnSVYwRMD8gmCP/AcNv79URi3Vn6Y1CaI<br>
MhPS7EmVkzXhpaVNMyWx/1dMISr9b1u+/l7j<br>
cgCrcTatWPCAlOwAeldSIkUI/48= )<br>
518400 RRSIG A 7 3 518400 20091010173259 (<br>
20090910173259 55238 tld.<br>
TTCcl5k76cMRElWIFEExzqLJIYBN6UbvUnFQ<br>
Q+eWojU2uP3kQV2SOyYX7lBa3h8Jt71z9DWK<br>
TctNoOfVIjYc/ZtNr4lTkIDJXnSGjrKu5hVV<br>
mPqxyCvYrOmq39LAU36MTsikciYylbQ4zNIg<br>
GUoG7yAeOodXIKsWQG+yBXhYRbI= )<br>
86400 NSEC n0.tld. A RRSIG NSEC<br>
86400 RRSIG NSEC 5 3 86400 20091010173259 (<br>
20090910173259 48162 tld.<br>
mQtM3WYDY06Wk/9FDCYhsKONNzbL+IVtXNwb<br>
0IuSTTvXjj53mS1RAADXAFO09Jy1xd3sZLxS<br>
ATj6kHkF0/5AzdDAv1gMT9rtMNLZFJ0kgaWm<br>
3eFRZsb7KsqcmSs2tMH7sc9Hoyq8PRuZwNi+<br>
YUrDwXXfp9uGsbkxpZDENzEXZ90= )<br>
86400 RRSIG NSEC 7 3 86400 20091010173259 (<br>
20090910173259 55238 tld.<br>
FwDBgrnzDhU36qRpt+xm3gtk3Wa1BdsLpGrJ<br>
pxyO+wG8uONaxSZTEClxqzE3g/2PjF9Czh6g<br>
G826D5YV55SSarPv2R2xFCzaBeNpkxLLwbCl<br>
VNal62vlATpt66WZOwd6188guQxGgaDqD9CI<br>
AIQpfRdq/ObWsrOMavwrVeeWHts= )<br>
ns0.n2.tld. 518400 IN A 127.0.0.1<br>
ns1.n2.tld. 518400 IN A 127.0.0.1<br>
n0.tld. 518400 IN NS ns0.n0.tld.<br>
518400 IN NS ns1.n0.tld.<br>
86400 NSEC n1.tld. NS RRSIG NSEC<br>
86400 RRSIG NSEC 5 2 86400 20091010173259 (<br>
20090910173259 48162 tld.<br>
ZN3i5gz7WFdRkRMfifXCfJ3H3G119EyqsqPc<br>
ohwQD36feCDbB+cD+6f/RE+FU6FGOzfqhp31<br>
6iWOyumPOBq3Y7qd31fYCrf0X57tocj+6StR<br>
j722wUc6OSutrAgv3TElQ2pZ6VaVCRYob7Nv<br>
6iodhOBY37iiidt8bB1Cqlgskzw= )<br>
86400 RRSIG NSEC 7 2 86400 20091010173259 (<br>
20090910173259 55238 tld.<br>
JoR1S9Ugc8FYqxsKHSkslfWE6Di14Zz68p8W<br>
j5Au+Qf2Eueex9mDJE3AJa8sgewgAshsjVk/<br>
j5a3N/Cv+Fh0BFkW6P7A0JKGp8KTsaIHdND5<br>
kp95lZGOt8cWOE6oc3cDe18hJg/MIL0o1I5D<br>
Nj5Fv+myYzvq85uJD+Te20csYG8= )<br>
ns0.n3.tld. 518400 IN A 127.0.0.1<br>
ns1.n3.tld. 518400 IN A 127.0.0.1<br>
n1.tld. 518400 IN NS ns0.n1.tld.<br>
518400 IN NS ns1.n1.tld.<br>
86400 NSEC n2.tld. NS RRSIG NSEC<br>
86400 RRSIG NSEC 5 2 86400 20091010173259 (<br>
20090910173259 48162 tld.<br>
NH3RkSff6CVh5azLbyQ5lMKoc6PTf77oPG94<br>
0M9NzMS238ZWlI8Y+By6yauam46luTGpVEhK<br>
noY+sF18iPbMBUQCjB39iId/BVhw5XzXxmAD<br>
jYVkbOSU1iOtIHW3vSMVFOle2i/xrV1EnEUu<br>
U18254dt3PKePntcgGOwS5jKh2U= )<br>
86400 RRSIG NSEC 7 2 86400 20091010173259 (<br>
20090910173259 55238 tld.<br>
KDnPQTVoyLakxjlEOQKQsjgq2PwiFZsd9x/N<br>
V2CE8lRL0aUuluzrlHc0d4RZ0K9xMSSCRvDT<br>
+oUW5THdTPRkc5IMhMdzvqnvUG8oK2KGzZf9<br>
kZo6VCnbm8hzghYNFQbSqF0jCrSC6xSP1wVb<br>
/if0IdyVHjE1PMtk9R16ozPVFkY= )<br>
ns0.n4.tld. 518400 IN A 127.0.0.1<br>
ns1.n4.tld. 518400 IN A 127.0.0.1<br>
n2.tld. 518400 IN NS ns0.n2.tld.<br>
518400 IN NS ns1.n2.tld.<br>
86400 NSEC n3.tld. NS RRSIG NSEC<br>
86400 RRSIG NSEC 5 2 86400 20091010173259 (<br>
20090910173259 48162 tld.<br>
sPWyGt70zgZZESXjwNpE1dQf09saBUY53vPe<br>
mZeXOPFpdWQdy3sfuhfPAkSeL80fNzqBTmXW<br>
mMAB2YSJTMfnuCp4FlDb7hO2Q1PR7ggJOoV1<br>
dE8VoD7QCDZogG8yqz2KljIPgPdX+LeYyu9D<br>
3zujL2SO/frJnlG8iuPdsvIPssQ= )<br>
86400 RRSIG NSEC 7 2 86400 20091010173259 (<br>
20090910173259 55238 tld.<br>
FvQl8tnSFcPsTsjSoagsA7KstJltK+Z5DW75<br>
Oan4KmnzBdXSiiYiGK/aBlgQLOZ/FP30Wxif<br>
BvWBhcgn9JY3Mevndfdub746KG2w/sWfjJR/<br>
3eeFM/Se+uvVMugk4urtzfNi3Rc6oYCK/m47<br>
TUCLLqmf1kKTTYBNRPOddeA00a0= )<br>
ns0.n5.tld. 518400 IN A 127.0.0.1<br>
ns1.n5.tld. 518400 IN A 127.0.0.1<br>
n3.tld. 518400 IN NS ns0.n3.tld.<br>
518400 IN NS ns1.n3.tld.<br>
86400 NSEC n4.tld. NS RRSIG NSEC<br>
86400 RRSIG NSEC 5 2 86400 20091010173259 (<br>
20090910173259 48162 tld.<br>
OmypXg7CT1p+26QJeI6Kkv3ylYtjFSPnmj4B<br>
oCRsN7zXgsZeqHzDOjwyU0QcJETC9SW8qH47<br>
k1H9hN+/91ne31CKVFdjMHCfgqi18PA98lgw<br>
OU89MsZb9zEYmog2PjwksHY6dqS893llOaLo<br>
ZwX6UrEH88gh+MZe1uTixSKHXMQ= )<br>
86400 RRSIG NSEC 7 2 86400 20091010173259 (<br>
20090910173259 55238 tld.<br>
WhZOZegNAugM8lM5lbBgiA47iv3PazLx2L4y<br>
xCiGYmk/a4BXV3dJxtDHZoREkUynPEoNTKL6<br>
AwtmITwqBk4ZzchBNZLsynQq0JAB/QUdKgIT<br>
8I3KMsRMCY+g5LkdmRf7Zn+DPXFv2FnKZtCM<br>
4Hix3EZX9F5LC12pxEWpAGASkw0= )<br>
ns0.n6.tld. 518400 IN A 127.0.0.1<br>
ns1.n6.tld. 518400 IN A 127.0.0.1<br>
n4.tld. 518400 IN NS ns0.n4.tld.<br>
518400 IN NS ns1.n4.tld.<br>
86400 NSEC n5.tld. NS RRSIG NSEC<br>
86400 RRSIG NSEC 5 2 86400 20091010173259 (<br>
20090910173259 48162 tld.<br>
F2AmxnGNsI+xzw8j1IPE5zUkPRSWEv3+optY<br>
clEaPtXzd5R0SeAvcPuWjFApkEQDf+bMPA3f<br>
VdB+QubitaPy7cy6dViVqaQ1FTlp/ppWZWGs<br>
F0x35SXFFwb+yE+MZWrs0bJkVtSJ1g0k13Fu<br>
TuhlAA9sfHHnaZDGCP7uOE2E8ak= )<br>
86400 RRSIG NSEC 7 2 86400 20091010173259 (<br>
20090910173259 55238 tld.<br>
GEnElrZOW+8a8MSVdbtIwv+CAJ3cuHmC9PbA<br>
vyDjhOu+xqOR2shGrI5IleiTRVWRLaICrD7V<br>
dv6Za7YKrawkWU8Gq96vWlDAQVlw50xB49Ay<br>
RDdqm5cT+F499xNL27Cz03pv45twYtDRixE2<br>
4Olne4RWlvBRU1vRIxDHZtmShY8= )<br>
ns0.n7.tld. 518400 IN A 127.0.0.1<br>
ns1.n7.tld. 518400 IN A 127.0.0.1<br>
n5.tld. 518400 IN NS ns0.n5.tld.<br>
518400 IN NS ns1.n5.tld.<br>
86400 NSEC n6.tld. NS RRSIG NSEC<br>
86400 RRSIG NSEC 5 2 86400 20091010173259 (<br>
20090910173259 48162 tld.<br>
HdquVW48VASotbN1ku7Ito2kLLtXs9G6Clpm<br>
I59VECakH/zpJ6M7bKAK6VXMLeU+aVol0PVQ<br>
oIoOTUCJ0k8YtY3YPcoV09nGdZIHKKv/5Qr4<br>
vs1kCzu514nQldGYRKONe1FsRDAKzU4O0tb6<br>
2zHJMDQnl7/XFKaNUis0CMHmNzo= )<br>
86400 RRSIG NSEC 7 2 86400 20091010173259 (<br>
20090910173259 55238 tld.<br>
FMC3NLbpl5PtZ1rF0aG0GKi8bXo/tk2tQPvG<br>
vt2n6W5XOp2bA9dDNvas2+9k0+rG48d4dnrz<br>
3CospdxlzVDuH7HABzp0RAvDarCa/M6A0jre<br>
h90thiD5oXyrTrSLJV6j9H51GmPAFTTjFOmg<br>
POja85lhAExNNXtwB8V2dqY293E= )<br>
ns0.n8.tld. 518400 IN A 127.0.0.1<br>
ns1.n8.tld. 518400 IN A 127.0.0.1<br>
n6.tld. 518400 IN NS ns0.n6.tld.<br>
518400 IN NS ns1.n6.tld.<br>
86400 NSEC n7.tld. NS RRSIG NSEC<br>
86400 RRSIG NSEC 5 2 86400 20091010173259 (<br>
20090910173259 48162 tld.<br>
ACQQm3fihmm3oJC3eTMaYl8dwlCWFBKiaIsx<br>
qumYcT6W3ZGe6L5eV4SCsJpiAjInBQwXi7sw<br>
ILLp0/e/36Uj/Wh/AU03qYA5qBrwDix7k0iP<br>
sX9ovOlVb2EUgXdtMA+r+T9B3zXM+Rdss4e0<br>
s5O8/q67DxMAyjtbPljRCQ15Y5w= )<br>
86400 RRSIG NSEC 7 2 86400 20091010173259 (<br>
20090910173259 55238 tld.<br>
eTKjTFdKsGQ9jnTthME/1dC2vvvOD290B+S5<br>
aIdoNwN/gHZzk6ClM2fHGkfi22uXuh/fNFUx<br>
ZhNTulDuu+cewhqzy1BziuDzXCJP7boDxQRG<br>
EJlW2Eqcj+OnLVrjXBItBRc9NjDSH9QUPJKj<br>
HNG6H8nqFzae7/GB0qjrhLciRDs= )<br>
ns0.n9.tld. 518400 IN A 127.0.0.1<br>
ns1.n9.tld. 518400 IN A 127.0.0.1<br>
n7.tld. 518400 IN NS ns0.n7.tld.<br>
518400 IN NS ns1.n7.tld.<br>
86400 NSEC n8.tld. NS RRSIG NSEC<br>
86400 RRSIG NSEC 5 2 86400 20091010173259 (<br>
20090910173259 48162 tld.<br>
cZA6sFqKjsSPsmX+/ZLkeTbOiMKXBZVqk21d<br>
bH0LVKVI/3sXoWN89XGKCPGFlHt+vHYbZMeY<br>
d1GwO7UCpzAYa60UFlWOwemf6ShNpOtV1dUZ<br>
zmg9/pNvHtzhkJHp3FWZ1ovsujeSgk+/EhiO<br>
W9FjRwDBhPXgkGM8oTwrRefwR44= )<br>
86400 RRSIG NSEC 7 2 86400 20091010173259 (<br>
20090910173259 55238 tld.<br>
KkCsCmic7AeRmZ3PZj7HCSLaSO8uQZANdG1I<br>
qQGzuzVb3VIwE+hOXK/xU0KCIrCXCHV6iAZO<br>
GQdtRZ7T/Ifja00vt+vl3F7jq5hAXHCHbnxt<br>
uyiOAjTkCHyBBZLjiYJ4h1DbuwgmuTRRODHK<br>
Uj93xb5rhl1mjeEYXH/LKKXaeiM= )<br>
n8.tld. 518400 IN NS ns0.n8.tld.<br>
518400 IN NS ns1.n8.tld.<br>
86400 NSEC n9.tld. NS RRSIG NSEC<br>
86400 RRSIG NSEC 5 2 86400 20091010173259 (<br>
20090910173259 48162 tld.<br>
r5zGeJjIMYJIpXA3iP8NIaVm+FTIdCgcwFtk<br>
JFeLICMdg47o+s5hYTbOg6WdDe3xt/YK9PCm<br>
BEyS79rSCAmiv73oN63Q3qtdJXOjLvWQvNb0<br>
9wophRtnr3z708g8ahsN8BKvL9uotfcAi7Vf<br>
KQgb2P9SF3Ub7PYwlhAp2EF7i/E= )<br>
86400 RRSIG NSEC 7 2 86400 20091010173259 (<br>
20090910173259 55238 tld.<br>
z8k/B61a6n/sKVfWpUYr4TQRIPb/0HNYohZO<br>
7IPSm03FcYg0vg4Z+tYJDk5frhWR91HAlGim<br>
QkzTey/ZhKvqPAts7jjOygqTIrLpyQPoFmym<br>
R6lpErMiPkm7j5gVIUCq/o9EfwOhGdkSKIIT<br>
CZQunhdGMGG9+uDGmcdPDweEdrc= )<br>
n9.tld. 518400 IN NS ns0.n9.tld.<br>
518400 IN NS ns1.n9.tld.<br>
86400 NSEC tld. NS RRSIG NSEC<br>
86400 RRSIG NSEC 5 2 86400 20091010173259 (<br>
20090910173259 48162 tld.<br>
HckPcSw6ZT78PzUOksI3QDMcoqd5CkjoTzPf<br>
3XIH4+yr/RTmXIhXqeMsyHqPt1CTOsAj55MB<br>
9PH9NKnJehMlLPgZ3G6kMc98M3Atbrq+Fggq<br>
z/308PJc0Pakxs4y22jIUl2QGEjRYU52g5WI<br>
kqRYLUSLclggGgkE5hjReLsTSUc= )<br>
86400 RRSIG NSEC 7 2 86400 20091010173259 (<br>
20090910173259 55238 tld.<br>
YQwSthd4fIG+L8xYMCuFnM7cuDqgNHhiZkHE<br>
75d3u4qMmgW0ym4eWcFRZ5JoXsTUa+XUae0h<br>
rBptie1WX3kmR+dfGdRETDa/gfNkWIqGwh/T<br>
XlEUTg0GMlYHkpivNZo/DqGKoX+RhD2IxgZS<br>
YLYAXluCbwYhZGI1J3g33UKs0x4= )<br><font color="#888888">
<br>
-- <br>
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-<br>
Edward Lewis<br>
NeuStar You can leave a voice message at +1-571-434-5468<br>
<br>
As with IPv6, the problem with the deployment of frictionless surfaces is<br>
that they're not getting traction.<br>
</font></blockquote></div><br>