Re: DNSSEC: give KSK from my domain to parent zones

Hi there, On Fri, 5 Oct 2018, Roberto Carna wrote: ... when I check for the DNSEC support with: dig com.uk +dnssec +multi I can see there is no support at all...so use DNSSEC for xxx.com.uk has no sense at allhasn't it? Do you mean "xxx.co.uk" and not "xxx.com.uk"? -- 73, Ged.

Re: DNSSEC: give KSK from my domain to parent zones

Thanks a lot to all of youNow I understand. But when I check for the DNSEC support with: dig com.uk +dnssec +multi I can see there is no support at all...so use DNSSEC for xxx.com.uk has no sense at allhasn't it? ; <<>> DiG 9.10.3-P4-Debian <<>> com.uk +dnssec +multi ;; global options:

Re: DNSSEC: give KSK from my domain to parent zones

On Oct 4 2018, Mark Elkins wrote: On 10/04/2018 05:03 PM, Roberto Carna wrote: [...] I have two DNS servers running BIND 9.10, they have delegated my own domain, let's say "robert.com.uk " and some other domains from our clients, let's say: client1.com.uk

Re: DNSSEC: give KSK from my domain to parent zones

Thanks a lot Mark, regards !!! El jue., 4 oct. 2018 a las 16:18, Mark Elkins () escribió: > > > On 10/04/2018 05:03 PM, Roberto Carna wrote: > > Hello, thanks to both of you for your help. Now I understand I have to > contact my registrar in order to give it the DS of the KSK. > > Please I have

Re: DNSSEC: give KSK from my domain to parent zones

On 10/04/2018 05:03 PM, Roberto Carna wrote: > Hello, thanks to both of you for your help. Now I understand I have to > contact my registrar in order to give it the DS of the KSK. > > Please I have a last question: > > I have two DNS servers running BIND 9.10, they have delegated my own >

Re: DNSSEC: give KSK from my domain to parent zones

Hello, thanks to both of you for your help. Now I understand I have to contact my registrar in order to give it the DS of the KSK. Please I have a last question: I have two DNS servers running BIND 9.10, they have delegated my own domain, let's say "robert.com.uk" and some other domains from our

Re: DNSSEC: give KSK from my domain to parent zones

You give the matching DS record via your registrar much the same way as you do the NS RRset or glue address records. If your registrar doesn’t support DNSSEC you will need to change registrars. If your parent zone uses CDS or CDNSKEY then publish those records at the zone apex. If your

Re: DNSSEC: give KSK from my domain to parent zones

On 03/10/2018 21:24, Roberto Carna wrote: Hi Roberto, > Dear people, I have DNSSEC implemented in my authoritative domain in BIND > 9.10. I've created the KSK and ZSK too. > > Let's say my domain is "robert.com.uk". > > How do I have to give the KSK (key signing key) to my parent zones, let's

DNSSEC: give KSK from my domain to parent zones

Dear people, I have DNSSEC implemented in my authoritative domain in BIND 9.10. I've created the KSK and ZSK too. Let's say my domain is "robert.com.uk". How do I have to give the KSK (key signing key) to my parent zones, let's say COM and UK ??? And what if COM or UK don't use DNSSEC at all