To:
Roy Arends <Roy.Arends@nominum.com>
Cc:
Jakob Schlyter <jakob@crt.se>, Ólafur Guðmundsson <ogud@ogud.com>, <dnssec@cafax.se>, Dan Massey <masseyd@isi.edu>, Edward Lewis <lewis@tislabs.com>
From:
Roy Arends <Roy.Arends@nominum.com>
Date:
Mon, 1 Oct 2001 12:31:10 +0200 (CEST)
In-Reply-To:
<Pine.BSF.4.33.0110011207580.32434-100000@node10c4d.a2000.nl>
Sender:
owner-dnssec@cafax.se
Subject:
Re: Signalling DS support to resolvers
On Mon, 1 Oct 2001, Roy Arends wrote: > > how do we know if root uses DS or SIG@child ? > > In any case, always, no exceptions, the root has a key in either the DS > or SIG@child scheme. Since resolvers has to be preconfigured with the > roots-pubkey, you don't need a DS for the parent key. Eh, you don't need a DS for the root key.