Re: Naked domain resolution with DNSSEC
Andrew Sullivan <[email protected]> Wed, 23 Oct 2013 05:17:12 -0400
| Newsgroups | gmane.ietf.dnsext |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Oct 23, 2013 at 09:00:20AM +0000, Kumar Ashutosh wrote: > > In Setup where Parent zone (.com) is Signed and Child zone (contoso.com) is Unsigned. CNAME record is present at apex (.) of Child zone ( contoso.com CNAME new_contoso.com) The Resolver responded with SERV_FAIL. It should respond with SERVFAIL in that case. You have an invalid zone on the child side. You can't have a CNAME at the apex of a zone. Best, A -- Andrew Sullivan [email protected] _______________________________________________ dnsext mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsext