Fixes, what fixes?

• DS RR

  • Delegation from parent to child
  • Solves key rollover problems
  • Backward incompatible

• NXT OPT-IN

  • Scaling problems for large zones
  • Opt-In allows for slowly introducing DNSSEC
  • Loss of authenticated denial

Previous slide

Next slide

Back to first slide

View graphic version