Both the zones fedoraproject.org and getfedora.org are DNSSEC signed, with what appear to be continuously updated signatures.
Yet, only the zone fedoraproject.org has DS records published in the .org parent zone.
Would it be possible to also publish DS records for getfedora.org, so that its zone content too can be verified by a DNSSEC resolver?
Metadata Update from @bowlofeggs: - Issue priority set to: Waiting on Assignee (was: Needs Review)
Metadata Update from @smooge: - Issue assigned to smooge
Still waiting from legal on this
Legal gave the go ahead but I am waiting for the domain registry to deal with this.
After several attempts we have the records in place. They should roll out in the next 24 hours for everyone.
Metadata Update from @smooge: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.