On Oct 18, 2011, at 10:21 AM, Eric J Esslinger wrote: > Well it makes sense we should, just that all the examples, discussion, and > such I've read dealt with forward records. > > I guess I get to dig some more. Thanks.
Eric - Your in-addr zone first needs to be signed and then the DS records are put in the parent in-addr zone to link into the signed IN-ADDR.ARPA hierarchy. In the ARIN region, this can be done via the DNSSEC DS record management in ARIN Online or via the RESTful provisioning interface. ARIN DNSSEC Project overview: https://www.arin.net/resources/dnssec/ ARIN Online/DNSEC Tutorials: https://www.arin.net/knowledge/dnssec/index.html FYI, /John John Curran President and CEO ARIN
