inconsistency dnssec debuguers response and writing conseil for new areas zone
fakessh @
fakessh at fakessh.eu
Tue Mar 1 19:17:42 UTC 2011
Le mardi 01 mars 2011 à 09:34 +0100, Laurent Bauer a écrit :
> On 28/02/2011 23:35, fakessh @ wrote:
> >> This is not handled yet. The .FR zone has been signed since september
> >> 2010, but submitting DS for child zones will be supported later this year.
> >> See http://operations.afnic.fr for more information.
> >>
> > thank you for taking the trouble to answer me.
> >
> >
> > I therefore rest with my chain of security provided by isc dlv and wait
> > for the DS flag a chance to insert later.
> >
> > but I wonder one thing I'm not a registar I am a passionate individual,
> > how I'm going to do later for the flag for my DS .eu domain and .fr? I
> > do not know and still do not understand how
>
> You will have to ask your registrar to submit the DS to the parent zone,
> just as you have to ask your registrar
my registrar OVH not implement dnssec for yet
> when you want to change the NS
> for your zone.
i use other dns secondary that does not come from ovh
use isc dlv
> If they are already implementing DNSSEC, ask them what you are supposed
> to provide (the KSK or the DS only) ;
for the submission in isc dlv
we have their key to submit and we get a new text record
it is easy to initiate
> I guess there must be a FAQ
not FAQ to explicite for implement a DS record
> somewhere on the control panel.
is the repeat isc dlv seems to accept the flag DS
in my case i have to a file dsset-fakessh.eu
but the file contains two keys DS and i don't know which to use
> Eurid is already ready for DS submission, so you will be able to
> complete the whole chain of trust for your .eu domain, if your registrar
> is DNSSEC ready.
>
> Laurent
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
gpg --keyserver pgp.mit.edu --recv-key 092164A7
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Ceci est une partie de message num?riquement sign?e
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20110301/8e5690c5/attachment.bin>
More information about the bind-users
mailing list