3 ms·
Did you mean to say that "no" org domains are signed? As far as I understood it, some are, but the vast majority aren't? I'm not an expert in this stuff, but I
by mike-cardwell 16y ago
Did you mean to say that "no" org domains are signed? As far as I understood it, some are, but the vast majority aren't?
I'm not an expert in this stuff, but I thought that getting "org" it's self signed was a massive achievement because it now means that domains beneath "org" can be signed?
If I do an A record lookup of "baddata-a.test.dnssec-tools.org" it returns NXDOMAIN on my system which supports DNSSEC, and 75.119.216.30 on my system which doesn't...
- gxti 16y agoYes, in order to validate the chain of trust the TLD must be signed but sibling 2LDs have nothing to do with whether a particular 2LD can be signed. If wikipedia.org wants to sign, they can do so, because their parent (.org) is signed, but it doesn't matter whether widgets.org is signed.