Re: isc trust anchor

On Wed, 15 Sep 2010, sami's strat wrote: > > a.us is (dnssec) signed and the parent domain has a copy of the DS keys. > Is there a way to have host.b.com run dnssec aware queries against a.us? You don't need or want the ISC DLV trust anchor for that, since there is a chain of trust to the root and

isc trust anchor

If I have two domains, say a.us and b.com a.us is (dnssec) signed and the parent domain has a copy of the DS keys. Is there a way to have host.b.com run dnssec aware queries against a.us? I was thinking of setting up and using the ISC trust anchor with both domains. Would that work? Are there