Negative trust anchors

[saradickinson]

No description provided.

[wtoorop]

So I actually tested with adding trust anchors for keys with algorithm 0 and that actually works.
I guess we just need a section explaining the details about DNSSEC on our website (going into the details for Zero configuration DNSSEC espescially) and we're good.

[wcawijngaards]

Hi Willem, Please don't use algorithm code point 0, without IANA assigment. That would pollute the small 8 bit space for it. Instead use another flag or signal in the code to indicate a negative trust anchor, if possible. Best regards, Wouter

…

On 22/11/17 15:24, wtoorop wrote: So I actually tested with adding trust anchors for keys with algorithm 0 and that actually works. I guess we just need a section explaining the details about DNSSEC on our website (going into the details for Zero configuration DNSSEC espescially) and we're good. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#331 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AE-oz7f-ugv2WSYv9d--1S6a8bEanuYQks5s5C6KgaJpZM4POlCx>.