DNSSEC

Michael Smith smitit at gmail.com
Mon Nov 27 23:10:41 UTC 2006


How do I preserve the chain of trust if I happen to run 2 zones within
the same DNS server with DNSSEC (running Bind 9.3.3)

zone 1: example.com (signed with a KSK)
zone 2: myzone.example.com (signed with a KSK)

Do I need to include anything on the "example.com" zone in order to
enable the trust? Or, do I need to sign the example.com zone with
another parameter?

Do I need to add the DS RR record with something like "$include
dsset-myzone.example.com" on the "example.com" zone?

Mike



More information about the bind-users mailing list