Both the zones fedoraproject.org and getfedora.org are DNSSEC signed, with what appear to be continuously updated signatures.
Yet, only the zone fedoraproject.org has DS records published in the .org parent zone.
Would it be possible to also publish DS records for getfedora.org, so that its zone content too can be verified by a DNSSEC resolver?
Metadata Update from @bowlofeggs:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
Metadata Update from @smooge:
- Issue assigned to smooge
Still waiting from legal on this
to comment on this ticket.