The DNSSEC testbed for Germany has met another milestone of its roadmap: Exactly as planned, DENIC made available the signed version of the .de zone in the DNSSEC test environment on 5 January 2010.
This means that :
1.DENIC will sign the respective current .de zone version of the production environment once a day and make it available in the DNSSEC test environment for DNS queries.
2.The two name server clusters in Frankfurt (81.91.161.228) and in Amsterdam (87.233.175.25) will answer DNS queries including DNSSEC data as authoritative and non-recursive name servers.
3.You will find instructions how to redirect queries for the .de domains for diverse resolvers in separate configuration examples.
4.As regards validating resolvers, the set-up now allows that the Trust Anchor is configured for the .de testbed. The Trust Anchor is a copy of the public section of the Key Signing Key that is communicated to the resolver as the Trusted Key. This Trust Anchor or Secure Entry Point is published on an https-secured webpage.
For more details check out www.denic.de
- Follow us on :
