[dnssec-deployment] Results of an DNSSEC AT survey

[Otmar Lendl]

On 2008/01/04 23:01, Mark Andrews <Mark_Andrews at isc.org> wrote:
> 
> 	Similar checks should be done at delegation time and the
> 	delegation should be refused if NXDOMAIN is returned or
> 	the nameserver fails to respond to EDNS queries.  Both
> 	of these conditions cause operational problems.

nic.at does check basic nameserver configuration at delegation time.
(IIRC, as a hardcore requirement for requests coming by email, but only
post-hoc in the case of EPP.)

That doesn't guarantee that people screw up their setup over time.

But yes, it's a good idea to add a check whether the nameservers
for a domain can cope with validating servers or not.

/ol
-- 
-=-  Otmar Lendl  --  ol at bofh.priv.at  -=-