ARIN and DNSSEC

Mon Jul 6 14:35:56 UTC 2009

Hi Mark,

Are there any high level operational details you could share?

Specifically, are you using any commercial/OSS software to handle the 
(automated?) periodic key roll overs?

Are you using bind? Do you have any experience or suggestions on what 
version to start with?

Given that phase 3 is still a work in progress - do you anticipate 
giving ARIN members an automated/scripted way to submit their delegation 
records?

Thanks!
- Dan

Mark Kosters wrote:
> Hi
>
> ARIN is now signing the /8 zones that it is authoritative for (eg
> 192.in-addr.arpa, etc).
>
> This the phase two of a three-phase process. Given that in-addr.arpa is
> not yet signed, we have published a list of trust anchors that you can
> download to configure on your local recursive resolvers.
>
> Additional details are at http://www.arin.net/about_us/dnssec/
>
> Regards,
> Mark Kosters
> ARIN CTO
>
>   