[dnssec-deployment] Results of an DNSSEC AT survey
ol at bofh.priv.at
Sat Jan 5 04:33:06 EST 2008
On 2008/01/04 23:01, Mark Andrews <Mark_Andrews at isc.org> wrote:
> Similar checks should be done at delegation time and the
> delegation should be refused if NXDOMAIN is returned or
> the nameserver fails to respond to EDNS queries. Both
> of these conditions cause operational problems.
nic.at does check basic nameserver configuration at delegation time.
(IIRC, as a hardcore requirement for requests coming by email, but only
post-hoc in the case of EPP.)
That doesn't guarantee that people screw up their setup over time.
But yes, it's a good idea to add a check whether the nameservers
for a domain can cope with validating servers or not.
-=- Otmar Lendl -- ol at bofh.priv.at -=-
More information about the Dnssec-deployment