If there are RRSIG(A) records in .com and .net there must have been a policy change since 2010?
Sorry, no, they're different. For all of the new TLDs they run they have some test delegations with name servers in the TLD: emt-ns1.emt-t-1113662392-1595861228527-2-sdojq.aol. 172800 in a 198.41.1.168 emt-ns1.emt-t-1113662392-1595861228527-2-sdojq.aol. 172800 in rrsig a 8 3 172800 20200804181604 20200728181604 32545 aol. h+iuDHDjmnr5a0egcjKDSiGxSyYe9O4UVJVOL8F3ttqwv31PnNnWyxFoa9k8gyGGBB6155jbJExvCY4KxqHqYPKylVw5Br/zfbFCfXD+wpMEmxHvQbRkDtK7AZBSLNunPl8gJ+WmywX8LVXhjobWCo9VGMogVKJz+cRcFKu/PY97fOzQbnNJBkF473zoPNX0Ct+2C/5QSEd5OYSIVfD2iA== emt-ns1.emt-t-1158551749-1595861079980-2-xo.aol. 172800 in a 198.41.1.126 emt-ns1.emt-t-1158551749-1595861079980-2-xo.aol. 172800 in rrsig a 8 3 172800 20200804175637 20200728175637 32545 aol. a4ij0JWJZlHXbPR+At9pYnTrWwpyFI12ubSnMmZ6PhlK4Sed5v64mzVy8QAmbgAtT2kNJqLW/weG4ZGHQDzN/oTYo2+NhLYpqf9/r1CBaX1V3As17lOSx5I7nm5aeKIupYnyMBb/h5NyxIh/7pbYT4fd+AtENKIt1Va+TAsZPBcL6a9dqcajRpnQ3Fx9Tq9QQJQC38sfHEK2X4fjRCF3/w== emt-ns1.emt-t-1737294735-1595858930228-2-jz.aol. 172800 in a 198.41.1.92 emt-ns1.emt-t-1737294735-1595858930228-2-jz.aol. 172800 in rrsig a 8 3 172800 20200804171915 20200728171915 32545 aol. FiTCAdK7jDWig2s0Y/duIsKuM86BOoe4jEcYLh9eEI1swnPKmUTWY9aM5xCFr9yqTlWHDz5cX3WzivizMqbhOa7LorQuIU359bh2z9FOk1MWZrhLUk5jhBW8tLT+Lj6lNe8rN4kmfVAU3ScBJ8X+pfALYACkoHdIuZs74fvspxiO/DF7EOH88mmyedyFiZA0NtOzN4lfFLDkPqUgKQL+8g== emt-ns1.emt-t-1919814529-1595856863287-2-rflv.aol. 172800 in a 198.41.1.111 emt-ns1.emt-t-1919814529-1595856863287-2-rflv.aol. 172800 in rrsig a 8 3 172800 20200804165227 20200728165227 32545 aol. WtEXPHu8fXQ3hDK6qVOmHbcRDMKsXTG2Q3qlJh10zyUCAFATsSvaZtHvmFZX60EvzB5H9qOATjmhd4ondDAoHwwS5+vn2Q8+Gtwl8lbMgv97OjtZTyf+KDKf7zsS+h7+rQtL8xOHSZp04uB6bTGscE7FoFVnXtGLC8efJPpGcIEvXtqx1CQMmA+OfY6Fkff6a0+qD3ZECCWtLbc/KI3pnw== emt-ns1.emt-t-2040593332-1595870898209-2-fjmc.aol. 172800 in a 198.41.1.65 emt-ns1.emt-t-2040593332-1595870898209-2-fjmc.aol. 172800 in rrsig a 8 3 172800 20200804215349 20200728215349 32545 aol. CKITWMU4hsaZz9sDYLPZOdnqPrGucEb82tPrFe7AUnsKC8uc20OwpaWBZsKiljm1J3khT7LuZFfLpvAC4Ma4c7DFXZBlJU0vwV4ONk5+M6+Ne+kiIYr8FfdAZy/UfgO0PYY0bqFYADINjxhAAcUPabgDQXmyjgHMLJmSXHibCWlD7rNhGbSYnHk2HYljhB3F5Qr5M/9JbgSXySq2XAdVQQ== emt-ns1.emt-t-320674882-1595861934204-2-ngoj.aol. 172800 in a 198.41.1.109 emt-ns1.emt-t-320674882-1595861934204-2-ngoj.aol. 172800 in rrsig a 8 3 172800 20200804183500 20200728183500 32545 aol. OFH8JEJioRiVjLm9eP2Dxgncj064Mevm9QAV0/Ybj8p0HhhEehlKvwazcTSCymLHN2eKiw8b9jN3Lfvpy2PEh2yXGM+GzJ5/eTLO0RLGV2PuaXYGiFbgze8j48ROw+W9FD7LdP33U2vGXwmn8aHaIAuCvzoIHQAUnDgKTJK9zQYzYj51Ltx0zFZGtibsafKwMvRI7fJcbJgApAJ89tjaSQ== emt-ns1.emt-t-645432105-1595875144963-2-p.aol. 172800 in a 198.41.1.80 emt-ns1.emt-t-645432105-1595875144963-2-p.aol. 172800 in rrsig a 8 3 172800 20200804233833 20200728233833 32545 aol. KVOc4xcORtulWDbaMxMBATKmBxPz2BKTozKsh9hWmxqAYuJviwRSfFDthojzIWc1rHJocAWTf/0pwQVhYvWeK1w5LH+4v33VxzGOlQKTBYr20etIgChS5JK7ohH4PsZPK0juk+1mvFHoD7DJYeGv3XIkXOEs4+cdsbIOD9hBnWh4OrihJdPGPZIzpiMG21Nplc5CFP+uOGbPZPtdqqdJEQ== emt-ns1.emt-t-706490806-1595861285174-2-gmk.aol. 172800 in a 198.41.1.117 emt-ns1.emt-t-706490806-1595861285174-2-gmk.aol. 172800 in rrsig a 8 3 172800 20200804182723 20200728182723 32545 aol. InRAqN/asgig+58aeUI4AqCP7QgMdK/Xr/5soEYRnvUdqXdD6s9vSqVDWhZzbdBNocKnoMo1WBiYUIMBvPoUGCMnAjCuKq5hze654pZAoiQYFatnE+AhNgkRqGdglvlSrP6ou7igOmPOAlMlEgmnwV3psVMJeaAdXI2Zx/460TLSYougRqS9/gCPf5hfinXiRpf4l2InnRypGU25ARapdw==
I don't know if other nameservers implement the same behaviour. AFAIK it isn't possible to represent orphan glue in standard zone files or zone transfers, so I think this is an ATLAS special.
Nothing special there, orphan glue that isn't under a delegation is just an ordinary A record. I suppose they could do an nsec3 opt-out to provide a hint that it's intended to be glue, but who'd care? Regards, John Levine, jo...@taugh.com, Taughannock Networks, Trumansburg NY Please consider the environment before reading this e-mail. https://jl.ly _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
