[dns-wg] Re: [enum-wg] Deploying DNSSEC in e164.arpa zone

this domain is signed, ALL servers respond with DNSSEC data EXCEPT the RIPE server which do not support DNSSEC.... so if you resolve domains from 8.4.e164.arpa zone using RIPE server, you can't get DNSSEC enabled answers. we will remove ns.ripe.net and the problem will be solved today. Ah, I might have hit that one, I just only tried it once. But there is at least one lesson in this: you make sure al servers support DNSSEC when you roll it out. jaap