To:
Roy Arends <Roy.Arends@nominum.com>
Cc:
<dnssec@cafax.se>
From:
Ólafur Guðmundsson <ogud@ogud.com>
Date:
Tue, 02 Oct 2001 11:24:25 -0400
In-Reply-To:
<Pine.BSF.4.33.0110011229260.32434-100000@node10c4d.a2000.nl>
Sender:
owner-dnssec@cafax.se
Subject:
Re: Signalling DS support to resolvers
At 06:31 AM 10/1/2001, Roy Arends wrote:
>On Mon, 1 Oct 2001, Roy Arends wrote:
>
> > > how do we know if root uses DS or SIG@child ?
> >
> > In any case, always, no exceptions, the root has a key in either the DS
> > or SIG@child scheme. Since resolvers has to be preconfigured with the
> > roots-pubkey, you don't need a DS for the parent key.
>
>Eh, you don't need a DS for the root key.
Or you only have the DS for the root key :-)
Olafur