[Opendnssec-develop] Passing through signed zones

Matthijs Mekking matthijs at nlnetlabs.nl
Thu Jun 13 15:01:07 UTC 2013


On 06/13/2013 04:56 PM, Jakob Schlyter wrote:
> On 13 jun 2013, at 16:43, "Rick van Rein (OpenFortress)" <rick at openfortress.nl> wrote:
> 
>> I assume this is a user-picked name that suggests to them what they mean, but that the name is not, as Jakob assumed from this text, in any way special.
> 
> Matthijs did in fact suggest a special name, that's why I proposed another tag.
> 
> As I understand this, the enforcer would ignore any zone parked as PassThrough/Transparent, correct?

Correct. This does open issues when you switch from a kasp policy to
passthrough or vice versa, as said in the reply to Rick (think gradually
transition). Especially in the passing through signed zones.

> 
> 
> 	jakob
> 
> 




More information about the Opendnssec-develop mailing list