Hi, I’ve looked and could not find an answer to my question anywhere.
If there are multiple DS records in a parent, with different key tags, where only one of the DS records has a corresponding DNSKEY record in the child zone that correctly signs the DNSKEY RRSET, will validating resolvers ignore the other DS records or could they cause responses from the child to become invalid? .einar ISNIC _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
