News for hackers. Stuff that matters.

A comment on Ed25519 for DNSSEC. Parent comment

Re:Ed25519 for DNSSEC by teddyh on Thursday September 28, 2017 @03:15AM (#15355339)
The zone may be signed locally, but the DS records for ed25519.nl haven’t (when I checked myself just now) yet been exported into the TLD zone. It’s basically equivalent to a self-signed certificate. The lack of DS records in the TLD zone is the reason why WHOIS says "DNSSEC: no".
[ Parent | on HN ]
Re:Ed25519 for DNSSEC by Habbie on Thursday September 28, 2017 @04:25AM (#15355621)
The .nl registry does not support algo 15 (and 16) for DS records yet. Support is expected soon.
[ Parent | on HN ]