> > one would likely need to start with a different structure
> > than ndb/dns currently has to get dnssec.  but i think that
> > the most of the query logic could be reused.
> As I understand it; It is an extension, the base DNS stuff should not  
> change.
> What would need to be changed in ndb, or would looking at the source  
> be better?

i think your understanding ma be incomplete.  dnssec
requires that the rrs be chained together in a particular
order.  and any change to a rr triggers resigning.  it
may be doable, but i think it would be easier to start
with dnssec in mind.

- erik

Reply via email to