[Dnssec-deployment] gost signed domains?

[Basil Dolmatov]

13.06.2010 15:51, Dmitry Burkov пишет:
> On 13.06.10 14:38, Wolfgang Nagele wrote:
>> Hi,
>>
>>> Here are a couple that SecSpider sees (they are serving GOST keys
>>> under algo # 249):
>>>
>>> cert.ru.
>>> gost.cert.ru.
>> Anybody here who knows when they intend to switch to the official
>> algorithm id?
Do not eat anything you find on the street. ;)


GOST-signed zone available for testing now:

m-system.net

There is a special record with wrong signature in the zone
- broken.m-system.net

KSK -
m-system.net. IN DNSKEY 257 3 12 
BDtDa2UxLe7cdDs9bX/X1Y/UXuhJnDrGDRuVQW0BBo8QF1Pr959WBI5Q 
ylNxyKp9Rm4yslb1hj4BQUEUWpOLWw==


dol@