Re: [dns-wg] DNSSEC: Signed zones list

27 Feb 2006


      ...
Another trick to delegate the maintaining work is to use a lookaside zone.
There are two zones out there: dlv.verisignlab.com and dnssec.iks-jena.de.
A lookaside zone is used by your DNS server to determine a "DS" record for
an unknown zone. Consequently the lookaside zone does not contain records
for chained zones.
It's like black magic :(

localhost bind # ping dlv.verisignlab.com
ping: unknown host dlv.verisignlab.com
localhost bind # ping dnssec.iks-jena.de
ping: unknown host dnssec.iks-jena.de

-- 
WBR,
Max Tulyev (MT6561-RIPE, 2:463/253@FIDO)