26 Feb
2006
26 Feb
'06
10:13 a.m.
Hello Olaf! Thank you! So as I can understand, to fully inplement DNSSEC on my named's I have to get ALL keys for ALL signed zones and premanently trace all of them if it is not expired, isn't it?
On Feb 24, 2006, at 2:57 PM, Max Tulyev wrote:
Hi!
Where can I find the list of signed domains and their open keys to set up my DNS resolver? Which zones are signed now (exept RIPE's ones)?
Hello Max,
There are not many of such lists. In fact I know of only one: http://www-x.antd.nist.gov/dnssec/
--Olaf
----------------------------------------------------------- Olaf M. Kolkman NLnet Labs http://www.nlnetlabs.nl/
-- WBR, Max Tulyev (MT6561-RIPE, 2:463/253@FIDO)