Insecure response BIND 9.7.0b2

Chris Thompson cet1 at cam.ac.uk
Thu Nov 19 20:01:13 UTC 2009


On Nov 19 2009, Jeremy C. Reed wrote:

>On Thu, 19 Nov 2009, David Forrest wrote:
>
>> Logged: Nov 19 12:13:45 maplepark named[23329]:   validating @0x17b7980:
>> dlv.isc.org SOA: got insecure response; parent indicates it should be secure
>> 
>> What does this mean?
>
>This is documented in the ARM. The parent zone says (published DS) that 
>it should have been signed.

So what are you suggesting? That a dlv.isc.org server went ape and
returned an insecure response for (IN,SOA,dlv.isc.org)? Or that the
user is under attack with faked responses?

You did realise that this is one *your* zones it is complaining about?

-- 
Chris Thompson
Email: cet1 at cam.ac.uk



More information about the bind-users mailing list