DNSSEC submit of DLV vs DNSKEY records?

dchilton+bind at bestmail.us dchilton+bind at bestmail.us
Thu May 5 19:25:27 UTC 2011


hi,

after signing my zones with 'dnssec-signzone', i 've got both 

 dsset-domain.com
 dlvset-domain.com

containing DS- and DLV-records, respectively.

i know i *can* submit the records to my registrar (DS records) and
dlv.isc.org (DLV records), but should I do both?

i'm not clear if these are redundant mechs for getting to a 'valid'
DNSSEC state, or complementary.

can anyone clarify -- both or just one? and if just one, which one?

thanks,

DCh



More information about the dhcp-users mailing list