[AfrICANN-discuss] .ZA and DNSSEC (was: .TZ DS records in root zone)

Dr Eberhard W Lisse el at lisse.na
Sun Feb 10 09:43:34 SAST 2013


Mark is the wrong person to ask. 

As I have stated repeatedly I have pressed Vika in Dakar somewhat because .ZA has only about 30 second level names which don't change much.

So it can be done with the BIND tools (as we have been doing in .NA for years now) on a laptop that remains unconnected to the net and locked in a safe which needs two people (keys) to open.

.co.ZA is another story, but as you can expect Mark is ready. 

And since they would be looking at an HSM, and .ZA runs on the same platform they could just piggyback, like .SC which runs on Afilias' platform.

el
-- 

Sent from Dr. Lisse's iPhone 5


On Feb 9, 2013, at 23:36, SM <sm at resistor.net> wrote:

> Hi Mark,
> At 12:41 09-02-2013, Mark Elkins wrote:
>> side? Take a look at 'www.dnssec.co.za'.
> 
> I don't see any DS record for .ZA in the Root Zone.  Are there any plans for .ZA to support DNSSEC in 2013?
> 
> Regards,
> -sm 
> _______________________________________________
> AfrICANN mailing list
> AfrICANN at afrinic.net
> https://lists.afrinic.net/mailman/listinfo.cgi/africann


More information about the AfrICANN mailing list