Re: Dnssec and ptr records

[John Curran <jcurran () arin net>]

On Oct 18, 2011, at 10:21 AM, Eric J Esslinger wrote:

> Well it makes sense we should, just that all the examples, discussion, and such I've read dealt with forward records.
>
> I guess I get to dig some more. Thanks.

Eric - 

Your in-addr zone first needs to be signed and then the DS 
records are put in the parent in-addr zone to link into the 
signed IN-ADDR.ARPA hierarchy.   In the ARIN region, this can 
be done via the DNSSEC DS record management in ARIN Online or
via the RESTful provisioning interface.

ARIN DNSSEC Project overview:  https://www.arin.net/resources/dnssec/
ARIN Online/DNSEC Tutorials: https://www.arin.net/knowledge/dnssec/index.html

FYI,
/John

John Curran
President and CEO
ARIN