This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/[email protected]/

[dns-wg] DNSSEC Provisioning for ERX Space Held with APNIC

Previous message (by thread): [dns-wg] DNSSEC Provisioning for ERX Space Held with APNIC
Next message (by thread): [dns-wg] How DNS caching affects the start of World IPv6 Day

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Wolfgang Nagele wnagele at ripe.net
Tue May 10 12:09:30 CEST 2011

Hi Shane,

> Does the update check that a given DOMAIN object is actually secure
> before accepting a "ds-rdata:" field? Or is there any warning or other
> indication on the reply from the RIPE database?
There are two things. One is that we only accept the ds-rdata once we have the
OK from the RIR receiving that space that they can support it. This is what this
announcement was about. So if you would try to submit ERX domain objects for
space with for instance AfriNIC the database would refuse the ds-rdata there
because AfriNIC does not yet support it.

The other thing is that the delegation checker like for any other delegation
checks if the ds-rdata (at least one of them) corresponds to a DNSKEY in that zone.

Cheers,
W

Previous message (by thread): [dns-wg] DNSSEC Provisioning for ERX Space Held with APNIC
Next message (by thread): [dns-wg] How DNS caching affects the start of World IPv6 Day

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

[ dns-wg Archives ]