RRSIG for glue records

Alan Clegg aclegg at isc.org
Wed Aug 4 13:22:09 UTC 2010


On 8/4/2010 2:58 AM, rams wrote:

> I have delegated NS records and those records pointed to A records in
> signed zone. When I queired for my delgated domain against bind 9.6-p3.
>  
> Bind is returning NS records and RRSIG for NS in authority section
> correctly. Glue records are returned correctly in additional section but
> RRSIG values are not returned for glue records.
> Is RRSIG won't return for glue records in additonal section?
>  
> Could you please clarify me.

Only authoritative data is signed.  glue records aren't authoritative,
thus they aren't signed.  Delegation NS records aren't signed either...

AlanC

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20100804/325e8b64/attachment.bin>


More information about the bind-users mailing list