Is DLV still usefull

Michael Sinatra michael at rancid.berkeley.edu
Tue Nov 16 19:35:32 UTC 2010


On 11/16/10 11:17, Thomas Schulz wrote:
> Now that the root is signed, is DLV still usefull?

Yes.  Not all TLDs are signed (although we're getting there), and not 
all registrars support adding DS records, even if the registry supports 
DNSSEC.  Therefore, there are still islands of trust that can only be 
negotiated by DLV.

> Will there be any
> clash if I add the managed-keys statement without removing the DLV setup?

Nope.  I have this setup running on a few servers and it works fine.

michael



More information about the bind-users mailing list