Mark Andrews writes:
>
> In message <[email protected]>
> ,
> "Khuu, Linh MicroTech" writes:
> >
> > Hi,
> >
> > I have question about the DNSSEC NS record.
> >
> > We have the parent zone, for example, example.net being signed with DNSSEC.
> > We have a child zone test.example.net delegating to glbl.example.net as NS
> > record. glbl.example.net is not a DNSSEC. Will nslookup for anything in te
> > st.example.net fail?
>
> No. The servers for a signed zone need to be DNSSEC aware. The
> servers for a unsigned zone do not need to be DNSSEC aware. As
> test.example.net is unsigned the servers for it do not need to be
> DNSSEC aware.
On re-reading you didn't supply enough information to determine
a yes or no answer. You should however be able to work the answer
out with the information above.
Mark
> Mark
>
> > Linh Khuu
>
>
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742 INTERNET: [email protected]
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: [email protected]
_______________________________________________
bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users
