dnssec: nxt+sig in parent file

Roy Arends roy at nlnetlabs.nl
Wed Mar 22 16:52:07 UTC 2000


Hello,

Regarding DNSSEC: Why does a parent-include-file, next to the child-zone
key(s) and a parent-generated sig(s) over the keys, have a NXT RR and a
SIG RR included ? 

Couldn't find anything related to this in RFC's. 

On the NAI LABS slides (slide 15 and 29) at 
      http://www.nic-se.se./dnssec/lewis/dns_signer/
  there are comments on these RR's, but no information on why these are
mandatory.

Any information on this would be appreciated.

TIA,

Regards,

Roy.
-- 
roy at nlnetlabs.nl                NLnet Labs
tel +31208884551                Kruislaan 419
|\ ||   _  _|_  |   _ |_  _     1098 VA  Amsterdam
| \||__| )(-|_  |__(_||_)_)     The Netherlands






More information about the bind-users mailing list