Re: [DNSOP] [dnsext] Re: Computerworld apparently has changed DNS protocol

[Matthew Dempsky <matthew at dempsky.org>]

On Wed, Nov 4, 2009 at 3:33 PM, Jay Daley <jay at nzrs.net.nz> wrote:
> As far as I am aware, yes it is real DNSSEC data so yes it will require DO=1
> but the keys will be dummy keys (i.e. secret) that cannot be configured as
> trust anchors and so the signatures will be ignored.  At the end of that
> phase, real keys will be used and published.
>
> See
>
> http://sel.icann.org/meetings/seoul2009/presentation-dnssec-workshop-lamb-28oct09-en.pdf
>
> for more details

I see now.  Thanks for clarifying.