Discuss mailing list

[Jeff Taylor <shdwdrgn AT sourpuss.net>]

The root zone I am building has all of the opennic and newnations TLDs in place before dnssec signs the zone.  I believe we should have a full chain of trust once everything in complete -- NS0 signs the root zone, each TLD signs their own zone, and so on.  Unless I'm misunderstanding how this works?

On 06/09/2014 03:43 PM, VITAS wrote:

Hi,

is there a possibility to use both the ican root zones and the opennic ones in order to be able to use dnssec on regular domains?

I suspect, that du to trustchain issues the opennic root keys wont be enough to implement methods like dane.

 

Greetings

 

VITAS