problem registering DS records with EDUCAUSE, sanity check please

Stephane Bortzmeyer bortzmeyer at nic.fr
Tue Jul 15 07:43:29 UTC 2014


On Mon, Jul 14, 2014 at 07:14:57PM -0700,
 Paul B. Henson <henson at acm.org> wrote 
 a message of 56 lines which said:

> I also don't think this is what educause is doing, as I haven't had
> any trouble entering DS records for published but not activated
> KSK's in the past,

You can also note that it is quite common to publish DS without any
matching KSK. It is even documented in RFC 6781, section 4.2.4. For an
actual example, see .UK <http://dnsviz.net/d/uk/dnssec/> (the yellow
path).




More information about the bind-users mailing list