<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>Thanks to all that replied. I think the solution I want to pursue is to integrate AD 2012 DNS with BIND. Talk about bleeding edge huh??</span></div><div><br><span></span></div><div><span><br></span></div><div><br></div> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Tony Finch <dot@dotat.at><br> <b><span style="font-weight: bold;">To:</span></b> Marc Lampo <marc.lampo@eurid.eu> <br><b><span style="font-weight: bold;">Cc:</span></b> John Williams <john.1209@yahoo.com>; bind-users@lists.isc.org <br> <b><span style="font-weight: bold;">Sent:</span></b> Monday,
July 2, 2012 11:10 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> RE: BIND, DNSSEC & AD<br> </font> </div> <br>
Marc Lampo <<a ymailto="mailto:marc.lampo@eurid.eu" href="mailto:marc.lampo@eurid.eu">marc.lampo@eurid.eu</a>> wrote:<br>><br>> you are aware that Windows DNS service understands DNSSEC algorithm 5<br>> (RSA/SHA-1 – NSEC) at most ?<br><br>Carsten Strotmann's post says Windows Server 2012 fixes this limitation<br>http://strotmann.de/roller/dnsworkshop/entry/dnssec_validation_in_microsoft_dns<br><br>Tony.<br>-- <br>f.anthony.n.finch <<a ymailto="mailto:dot@dotat.at" href="mailto:dot@dotat.at">dot@dotat.at</a>> http://dotat.at/<br>Viking, North Utsire, South Utsire: Southwesterly, backing southeasterly 4 or<br>5, occasionally 6 at first in Viking. Moderate. Rain or showers. Moderate or<br>good.<br><br> </div> </div> </div></body></html>