Should I be signing my ip6.arpa. zones. Is ip6.arpa signed, and is so how do add my zone to the root.
Am 04.02.2015 um 19:06 schrieb John:
Should I be signing my ip6.arpa. zones. Is ip6.arpa signed, and is so how do add my zone to the root.
i never ended reading the the ripe doku but anyway it may help you
http://www.ripe.net/data-tools/dns/reverse-dns/how-to-set-up-reverse-delegat...
http://www.ripe.net/ripe/docs/procedure-for-requesting-dnssec-delegations
Best Regards MfG Robert Schetterer
Am 04.02.2015 13:06 schrieb John:
Should I be signing my ip6.arpa. zones. Is ip6.arpa signed,
yes
and is so how do add my zone to the root.
as usual, $your_prefix_reverse.ip6.arpa. is a normal zone.
Thanks for the question. Looks like (only my?) sixxs setup is broken. I think, zones available via sixxs *are/where* dnssec capable. But my zone isn't :( investigating ...
"J" == John john@klam.ca writes:
J> Should I be signing my ip6.arpa. zones. J> Is ip6.arpa signed, and is so how do add my zone to the root.
ip6.arpa itself is, as are the zones controlled by the regionals.
But most of the ISPs do not bother to sign theirs.
Sixxs uses dlv to secure any of its intermediate zones which are parented by unsigned zones.
If your parent zone is signed, ask them whether they'll publish your DS.
Otherwise using dlv.isv.org is as good as it gets.
-JimC
participants (4)
-
Andreas Schulze -
James Cloos -
John -
Robert Schetterer