On Jan 20, 2010, at 10:33 AM, erik quanstrom <quans...@coraid.com>
wrote:
one would likely need to start with a different structure
than ndb/dns currently has to get dnssec. but i think that
the most of the query logic could be reused.
As I understand it; It is an extension, the base DNS stuff should not
change.
What would need to be changed in ndb, or would looking at the source
be better?
i think your understanding ma be incomplete. dnssec
requires that the rrs be chained together in a particular
order. and any change to a rr triggers resigning. it
may be doable, but i think it would be easier to start
with dnssec in mind.
That makes their use of the word extension wrong, but in that case
starting over would seem (and probably is) best.
Thanks.
- erik
