[gtld-tech] RDAP zoneSigned flag

[Hollenbeck, Scott]

Speaking as one of the authors of RFC 7483: delegationSigned is for the parent and zoneSigned is for the subject domain. If the parent has DS records, we know that the subject domain _should_ be signed. For what it's worth, neither of us authors feels that text is really clear.

Scott

> -----Original Message-----
> From: gtld-tech <gtld-tech-bounces at icann.org> On Behalf Of Michael
> Bauland
> Sent: Thursday, March 28, 2019 9:57 AM
> To: gtld-tech at icann.org
> Subject: [EXTERNAL] [gtld-tech] RDAP zoneSigned flag
>
> Hi,
>
> I just stumbled across the definition of zoneSigned as part of the secureDNS
> member in RFC7483. There is says:
>
> zoneSigned -- true if the zone has been signed, false otherwise.
>
> Now I'm wondering whether this relates to the TLD zone (i.e., it always MUST
> be set to true for ngTLDs) or whether the SLD zone is meant, in which case
> the registry does not know the value and simply won't publish it.
>
> Thanks in advance,
>
> Michael
>
> --
> __________________________________________________________
> __________
>      |       |
>      | knipp |            Knipp  Medien und Kommunikation GmbH
>       -------                    Technologiepark
>                                  Martin-Schmeisser-Weg 9
>                                  44227 Dortmund
>                                  Germany
>
>      Dipl.-Informatiker          Fon:    +49 231 9703-0
>                                  Fax:    +49 231 9703-200
>      Dr. Michael Bauland         SIP:    Michael.Bauland at knipp.de
>      Software Development        E-mail: Michael.Bauland at knipp.de
>
>                                  Register Court:
>                                  Amtsgericht Dortmund, HRB 13728
>
>                                  Chief Executive Officers:
>                                  Dietmar Knipp, Elmar Knipp