private trust anchor

[Michael W. Lucas]

Hi,

Is there a way to set up a private trust anchor for internal-only
zones with BIND 9.9?

I have some local and RFC1918 zones that I'd like to secure. It seems
I should be able to configure a private trust anchor and use that key
to sign these zones.

I've found, related docs, like draft-jabley-dnssec-trust-anchor-06,
which has great gobs of theory, but nothing on how to actually do this
with BIND.

Has anyone done this? Or is this just daft?

Thanks,
==ml




-- 
Michael W. Lucas 	
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Latest book: SSH Mastery http://www.michaelwlucas.com/nonfiction/ssh-mastery
mwlucas at michaelwlucas.com, Twitter @mwlauthor