Re: [dns-wg] DNSSEC: Signed zones list

In order to keep the maintaining effort as small as possible, several TLD offer a seperate DNS-server which hosts signed subzones. Such servers are available for *.fr, *.net and *.com. The *.se zone is signed using the standard DNS servers.

So where I can get the keys? ;) I googled, but found nothing :(

Another trick to delegate the maintaining work is to use a lookaside zone. There are two zones out there: dlv.verisignlab.com and dnssec.iks-jena.de. A lookaside zone is used by your DNS server to determine a "DS" record for an unknown zone. Consequently the lookaside zone does not contain records for chained zones.

Understood, nice idea, thank you! -- WBR, Max Tulyev (MT6561-RIPE, 2:463/253@FIDO)