>> Our customer uses a fictional Toplevel Domain[...] > > Can you flip the problem on its head, by signing the fictional TLD and > deploying managed-keys (or trusted-keys) on the validating resolvers? > > Graham
Unfortunately we can't sign the fictional TLD, since we are neither master nor slave of the zone. We are just forwarding our queries to a foreign authorative Server. Grüße, Stefan _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users