<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>DNSSEC NS record delegation</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">Hi,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">I have question about the DNSSEC NS record.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">We have the parent zone, for example,</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">“</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">example.net</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">”</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS"> being signed with DNSSEC. We have a child zone</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">“</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">test.example.net</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">”</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS"></FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">delegating to</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">“</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">glbl.example.net</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">”</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS"> as NS record.</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">“</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">glbl.example.net</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">”</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS"> is not a DNSSEC. Will</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"> <FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">n</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">slookup for anything in test.example.net fail</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Comic Sans MS">?</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN><A NAME=""><SPAN LANG="en-us"><FONT COLOR="#427D64" SIZE=2 FACE="Arial">Linh Khuu</FONT></SPAN></A><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT COLOR="#427D64" FACE="Arial"> </FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
</BODY>
</HTML>