Re: NSEC3 ISSUE

2011-01-08 Thread Torinthiel
On 01/07/11 14:25, rams wrote: > I have trouble resolving the host name dnssecnsec3qatestdomain.com > . which is NSEC3 signed. > This is the > parent and child zone. If I run dig ( dnssec query) with the +cd option > I which is a proper response: What version

Re: Question on ADDITIONAL SECTION

2011-01-08 Thread Barry Margolin
In article , p...@mail.nsbeta.info wrote: > > > > Because the 2nd response also included Authority Section, the additional > > data are the addresses of the authoritative servers. > > > > Thanks. > But why the second has an "AUTHORITY SECTION" included? but the first > doesn't? It's an op