dnssec subzone not signed question

[Alan Clegg]

> Showing my ignorance, can I
> Just not sign the dynamic subzones,  wirelessN/buildingN.example.edu
> <http://buildingN.example.edu>, even though example.edu
> <http://example.edu> is signed?

Sure.  As long as you don't put a DS record in the parent, you most
certainly don't HAVE to sign the child zones.

AlanC

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20101222/d418e39d/attachment.bin>