> Showing my ignorance, can I > Just not sign the dynamic subzones, wirelessN/buildingN.example.edu > <http://buildingN.example.edu>, even though example.edu > <http://example.edu> is signed?
Sure. As long as you don't put a DS record in the parent, you most certainly don't HAVE to sign the child zones. AlanC
signature.asc
Description: OpenPGP digital signature
_______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
