Root Zone DNSSEC Deployment Technical Status Update

Edward Lewis Ed.Lewis at neustar.biz
Fri Jul 16 10:36:47 CDT 2010


At 7:53 -0700 7/16/10, Leo Bicknell wrote:

>Perhaps you could explain why the keys are being made available in
>formats that, as far as I can tell, no nameserver software on the
>planet uses?

(My guess:)

There's no standard input format for name servers, especially 
regarding configuration information.  The problem isn't (just) that 
the root anchor isn't in the format for any name server, the problem 
is that name servers can't read the formats given.

If you want it for BIND, for example, ISC would be the place to get 
it in the "trusted-keys" syntax.

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis
NeuStar                    You can leave a voice message at +1-571-434-5468

Spouses, like Internet protocols, lack necessary troubleshooting tools. Sigh.




More information about the NANOG mailing list