proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

dchilton+bind at dchilton+bind at
Tue May 10 04:02:46 UTC 2011


On Tue, 10 May 2011 13:52 +1000, "Mark Andrews" <marka at> wrote:
> 	This sounds like you have configured 'must-be-secure ".";' which
> 	disables secure to insecure transitions within the must-be-secure
> 	namespace.

I'd not yet heard of that option.  It's not present in my named.conf at
all.  Reading e.g. here,, iiuc
it doesn't seem to default to enabled.


More information about the bind-users mailing list