Re: Root Zone DNSSEC Deployment Technical Status Update

[Edward Lewis <Ed.Lewis () neustar biz>]

At 7:53 -0700 7/16/10, Leo Bicknell wrote:

> Perhaps you could explain why the keys are being made available in
> formats that, as far as I can tell, no nameserver software on the
> planet uses?

(My guess:)

There's no standard input format for name servers, especially 
regarding configuration information.  The problem isn't (just) that 
the root anchor isn't in the format for any name server, the problem 
is that name servers can't read the formats given.

If you want it for BIND, for example, ISC would be the place to get 
it in the "trusted-keys" syntax.

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis
NeuStar                    You can leave a voice message at +1-571-434-5468

Spouses, like Internet protocols, lack necessary troubleshooting tools. Sigh.