Dnssec and ptr records
John Curran
jcurran at arin.net
Tue Oct 18 16:31:57 UTC 2011
On Oct 18, 2011, at 10:21 AM, Eric J Esslinger wrote:
> Well it makes sense we should, just that all the examples, discussion, and such I've read dealt with forward records.
>
> I guess I get to dig some more. Thanks.
Eric -
Your in-addr zone first needs to be signed and then the DS
records are put in the parent in-addr zone to link into the
signed IN-ADDR.ARPA hierarchy. In the ARIN region, this can
be done via the DNSSEC DS record management in ARIN Online or
via the RESTful provisioning interface.
ARIN DNSSEC Project overview: https://www.arin.net/resources/dnssec/
ARIN Online/DNSEC Tutorials: https://www.arin.net/knowledge/dnssec/index.html
FYI,
/John
John Curran
President and CEO
ARIN
More information about the NANOG
mailing list