[Dnssec-deployment] Publishing DS records in WHOIS

[Frederico A C Neves]

On Fri, Jul 30, 2010 at 10:52:35AM +1200, Jay Daley wrote:
> Does anyone have any view on whether registries should publish DS
> records in their WHOIS?
>

For the sake of having an OOB view of the name delegations specially
if you track NS/DS "quality status" its probably good to have both.

 > whois foo.eng.br
 domain:      foo.eng.br
 ...
 nserver:     dixit.foo.eng.br 200.160.7.134
 nsstat:      20100729 AA
 nslastaa:    20100729
 nserver:     sroot.dns.br
 nsstat:      20100729 AA
 nslastaa:    20100729
 dsrecord:    6928 RSA/SHA-1 CA7D9EE79CC37D8DC8011F33D330436DF76220D1
 dsstatus:    20100729 DSOK
 dslastok:    20100729
 ...

> cheers
> Jay

Fred