error (broken trust chain) resolving
Alan Clegg
aclegg at isc.org
Tue Nov 2 16:13:34 UTC 2010
On 11/2/2010 8:36 AM, Brian J. Murrell wrote:
> Alan Clegg <aclegg <at> isc.org> writes:
>>
>
> Hi Alan,
>
>> There isn't a chain of signed DS records that lead from a trust anchor
>> to the thing that you are trying to resolve.
>
> I guess I'm going to have to learn a bit more about DNSSEC in order to parse
> that. :-)
>
> Are there any good tutorials on the mechanics (as opposed to howtos about
> setting up and configuring trusted zones, etc.) of DNSSEC? i.e. Alice and Bob
> examples.
Well, there is a presentation that I gave at NANOG-50..
http://bit.ly/9H28oT
that gives a relatively clear (I hope) explanation of what is going on
in the DNSSEC validation process.
AlanC
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20101102/25f483f1/attachment.bin>
More information about the bind-users
mailing list