guyben d5d29959b4 Turn on DNSSEC for new Cloud DNS TLDs ... we set the "denial of existence" to NSEC (rather than NSEC3), because preventing "walking the zone" isn't an issue for TLDs. It uses the default security configuration for everything else, which at the time of this writing is: Key signing: RSASHA256, key length of 2048 Zone signing: RSASHA256, key length of 1024 ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=179045575		2017-12-27 10:48:42 -05:00
..
com/google/testing/builddefs	Update copyright year on all license headers	2017-02-02 16:27:22 -05:00
google/registry	Turn on DNSSEC for new Cloud DNS TLDs	2017-12-27 10:48:42 -05:00