DNSSEC - ReadList.com

2 msg	how do I force a zone transfer
13 msg	named.conf cannot be changed
1 msg	how to Build RBL using bind9 ?
17 msg	BIND 9.3.2 and temp box.
2 msg	BIND9 CNAME format
2 msg	rate of update queries?
5 msg	bind 9.4 srcrpm / spec file for centos 4x
3 msg	Multi-Master and NOTIFY
3 msg	9.4.0b4 problems
3 msg	Web Interface for BIND9
4 msg	pop email issue
4 msg	BLACKHOLE-1.IANA.ORG quit responding?
1 msg	Documentation of forwarding behaviour ?

DNSSEC
\ Michael Smith (27 Nov 2006)
. \ Mark Andrews (27 Nov 2006)

12 msg	How to reduce the number of IP address returned...
2 msg	Many un-resolved domains
8 msg	Reverse DNS not working for new server
6 msg	On-line nslookup?
14 msg	Accuracy of DNSStuff reports
4 msg	Help Understanding Cache Poisoining

Subject:	DNSSEC
Group:	Bind-users
From:	Michael Smith
Date:	27 Nov 2006

How do I preserve the chain of trust if I happen to run 2 zones within
the same DNS server with DNSSEC (running Bind 9.3.3)

zone 1: example.com (signed with a KSK)
zone 2: myzone.example.com (signed with a KSK)

Do I need to include anything on the "example.com" zone in order to
enable the trust? Or, do I need to sign the example.com zone with
another parameter?

Do I need to add the DS RR record with something like "$include
dsset-myzone.example.com" on the "example.com" zone?

Mike