Re: DNSSEC versus multiple views

2011-05-31 Thread Mark Andrews
In message , John Wobus write s: > What problems do sites have that deploy both multiple views and > DNSSEC? Sign all views. You can decide whether to use the same keying material or use differing keying material. If you use differing keying material you will need to distribute it. Different k

DNSSEC versus multiple views

2011-05-31 Thread John Wobus
What problems do sites have that deploy both multiple views and DNSSEC? I read the "Split-View DNSSEC Operation Practices" draft, which outlines a number of set-ups, generally citing disadvantages in the area of administration, troubleshooting, and added complexity. But it says these set-ups are