Re: DNSSEC and Geodns

[Stephen John Smoogen]

On Fri, Nov 20, 2009 at 8:27 PM, Nigel Jones <dev(a)nigelj.com&gt; wrote:
>  On Sat, Nov 21, 2009 at 1:18 PM, Stephen John Smoogen
> <smooge(a)gmail.com&gt; wrote:
> > On Fri, Nov 20, 2009 at 8:13 PM, Mike McGrath <mmcgrath(a)redhat.com&gt; wrote:
> >> Ugh, I really don't want to have to choose, nb did great
> work with getting
> >> dnssec going.
> >
> > I would only do it for a subzone and not for the main one. Basically
> > have ns1/ns2 have the signed zones and the subzones on another one.
>  Surely this is going to increase the time needed for clients to
>  perform DNS lookups on the content we got GEO-Located (i.e.
>  fedoraproject.org/admin.fedoraproject.org) 
Usually the time is really pretty small.

>  - Nigel
>
>  _______________________________________________
>  Fedora-infrastructure-list mailing list
>  Fedora-infrastructure-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list
>  


-- 
Stephen J Smoogen.

Ah, but a man's reach should exceed his grasp. Or what's a heaven for?
-- Robert Browning