DNSSEC DS Record

[sami's strat]

What about the child zone?  Do I need a DS record for the child zone as
well?  I see a good number  of big DNS players in DNS (no names) that do
have DS records in there zones.

Does zbc.com (for example) need DS, or is just passed by the TLD?

TIA

On Fri, Jul 14, 2017 at 5:20 AM, Steven Carr <sjcarr at gmail.com> wrote:

> On 14 July 2017 at 01:52, sami's strat <sami.strat at gmail.com> wrote:
> > However, the zone is missing the DS record, completely.  That being said,
> > what is the offset, or result?  I don't see an AD flag when querying the
> > zone.  Other then that, are there any other ramifications?
>
> Without the DS record in the parent the zone is treat as being
> unsigned (hence why you don't see the AD flag).
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170714/7a6c2979/attachment.html>