error (broken trust chain) resolving
aclegg at isc.org
Tue Nov 2 16:13:34 UTC 2010
On 11/2/2010 8:36 AM, Brian J. Murrell wrote:
> Alan Clegg <aclegg <at> isc.org> writes:
> Hi Alan,
>> There isn't a chain of signed DS records that lead from a trust anchor
>> to the thing that you are trying to resolve.
> I guess I'm going to have to learn a bit more about DNSSEC in order to parse
> that. :-)
> Are there any good tutorials on the mechanics (as opposed to howtos about
> setting up and configuring trusted zones, etc.) of DNSSEC? i.e. Alice and Bob
Well, there is a presentation that I gave at NANOG-50..
that gives a relatively clear (I hope) explanation of what is going on
in the DNSSEC validation process.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 260 bytes
Desc: OpenPGP digital signature
More information about the bind-users