[dns-wg] DNSSEC: Signed zones list

> In order to keep the maintaining effort as small as possible, several TLD
> offer a seperate DNS-server which hosts signed subzones. Such servers are
> available for *.fr, *.net and *.com. The *.se zone is signed using the
> standard DNS servers.

So where I can get the keys? ;) I googled, but found nothing :(

> Another trick to delegate the maintaining work is to use a lookaside zone.
> There are two zones out there: dlv.verisignlab.com and dnssec.iks-jena.de.
> A lookaside zone is used by your DNS server to determine a "DS" record for
> an unknown zone. Consequently the lookaside zone does not contain records
> for chained zones.

Understood, nice idea, thank you!

-- 
WBR,
Max Tulyev (MT6561-RIPE, 2:463/253 at FIDO)