Speaking as one of the authors of RFC 7483: delegationSigned is for the parent and zoneSigned is for the subject domain. If the parent has DS records, we know that the subject domain _should_ be signed. For what it's worth, neither of us authors feels that text is really clear. Scott
-----Original Message----- From: gtld-tech <gtld-tech-bounces@icann.org> On Behalf Of Michael Bauland Sent: Thursday, March 28, 2019 9:57 AM To: gtld-tech@icann.org Subject: [EXTERNAL] [gtld-tech] RDAP zoneSigned flag
Hi,
I just stumbled across the definition of zoneSigned as part of the secureDNS member in RFC7483. There is says:
zoneSigned -- true if the zone has been signed, false otherwise.
Now I'm wondering whether this relates to the TLD zone (i.e., it always MUST be set to true for ngTLDs) or whether the SLD zone is meant, in which case the registry does not know the value and simply won't publish it.
Thanks in advance,
Michael
-- __________________________________________________________ __________ | | | knipp | Knipp Medien und Kommunikation GmbH ------- Technologiepark Martin-Schmeisser-Weg 9 44227 Dortmund Germany
Dipl.-Informatiker Fon: +49 231 9703-0 Fax: +49 231 9703-200 Dr. Michael Bauland SIP: Michael.Bauland@knipp.de Software Development E-mail: Michael.Bauland@knipp.de
Register Court: Amtsgericht Dortmund, HRB 13728
Chief Executive Officers: Dietmar Knipp, Elmar Knipp