error (broken trust chain) resolving

Alan Clegg aclegg at isc.org
Tue Nov 2 16:13:34 UTC 2010


On 11/2/2010 8:36 AM, Brian J. Murrell wrote:
> Alan Clegg <aclegg <at> isc.org> writes:
>>
> 
> Hi Alan,
> 
>> There isn't a chain of signed DS records that lead from a trust anchor
>> to the thing that you are trying to resolve.
> 
> I guess I'm going to have to learn a bit more about DNSSEC in order to parse 
> that.  :-)
> 
> Are there any good tutorials on the mechanics (as opposed to howtos about  
> setting up and configuring trusted zones, etc.) of DNSSEC?  i.e. Alice and Bob 
> examples.

Well, there is a presentation that I gave at NANOG-50..

	http://bit.ly/9H28oT

that gives a relatively clear (I hope) explanation of what is going on
in the DNSSEC validation process.

AlanC

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20101102/25f483f1/attachment.bin>


More information about the bind-users mailing list