Re: DNSSEC

[David B. <da...@ve...>]

On Nov 23, 2010, at 4:50 AM, mod63 wrote:
> 
> Thank you for the fast reply.
> 
> The javadns documentation for version 2.1.0 contains additional methods not
> mentions in the online documentation such as the DNSSEC.sign() method which
> returns a RRSIGRecord, could you please clarify this, whats the state of the
> implementation?can it be used or modified?

I think what Brian is trying to say is that "adding DNSSEC" to existing DNS software is a non-trivial exercise.  It isn't (nearly) enough just to call DNSSEC.sign().

DNSJava does contain the building blocks for creating (say) a DNSSEC-enabled authoritative DNS server.  But it only contains a set of record types and useful, but low-level, signing  and verification routines.

--
David Blacka                          <da...@ve...> 
Principal Engineer    VeriSign Platform Product Development