> What is the expected behaviour given
> example.net CNAME kskroll-sentinel-is-ta-.example.com
> when you query for example.net when the key-tag does not match
> a root TA? etc.
This question is still outstanding as of version -08 of the draft.
--
Best regards,
M
figuration provided in Appendix B to RFC 7706, not in addition to
it.)
Chapter 5 of the BIND 9 ARM discusses how mirror zones work in more
detail:
https://bind.isc.org/doc/arm/9.13/Bv9ARM.ch05.html#zone_types
Please let me know if anything above is unclear.
--
Best
