dnsext-1----Page:4
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17 

Oh my! Changes to signing?
And more...
Discussed on Monday here - New rule:
If a wild card domain name owns EITHER an NS RRSet OR a DNAME RRSet
It is NEVER a source of synthesis
Queries return NXDOMAIN
The RRSIG label count treats the records as non-wildcards

PPT Version