proper setup of dnssec-validation to _always_ resolve, and retrieve DATA and status flags ?

[dchilton+bind at bestmail.us]

On Tue, 10 May 2011 15:17 +1000, "Mark Andrews" <marka at isc.org> wrote:
> dig +dnssec +cd soa com

dig +dnssec +cd soa com

	; <<>> DiG 9.8.0-P1 <<>> +dnssec +cd soa com
	;; global options: +cmd
	;; Got answer:
	;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55492
	;; flags: qr rd ra cd; QUERY: 1, ANSWER: 2, AUTHORITY: 14,
	ADDITIONAL: 1

	;; OPT PSEUDOSECTION:
	; EDNS: version: 0, flags: do; udp: 4096
	;; QUESTION SECTION:
	;com.                           IN      SOA

	;; ANSWER SECTION:
	com.                    900     IN      SOA    
	a.gtld-servers.net. nstld.verisign-grs.com. 1305004673 1800 900
	604800 86400
	com.                    900     IN      RRSIG   SOA 8 1 900
	20110517051753 20110510040753 36713 com.
	kV450cJYv8NlztaovFwY5ouWBBqDZq89o/uOdkVpHAvu/4wPiPTe60se
	Ay5/5BuA2O0ZBN/QEulqjb2xvULAHo5W3sgxdwx9spMTrU1Kdryw1+5Y
	zM19Kanl/tXgiPkRlidrLk6QEXx5GnMr6bYfayz7e4/vL5FL0nLjvIbb MF4=

	;; AUTHORITY SECTION:
	com.                    3600    IN      NS     
	g.gtld-servers.net.
	com.                    3600    IN      NS     
	e.gtld-servers.net.
	com.                    3600    IN      NS     
	j.gtld-servers.net.
	com.                    3600    IN      NS     
	d.gtld-servers.net.
	com.                    3600    IN      NS     
	b.gtld-servers.net.
	com.                    3600    IN      NS     
	i.gtld-servers.net.
	com.                    3600    IN      NS     
	h.gtld-servers.net.
	com.                    3600    IN      NS     
	a.gtld-servers.net.
	com.                    3600    IN      NS     
	k.gtld-servers.net.
	com.                    3600    IN      NS     
	m.gtld-servers.net.
	com.                    3600    IN      NS     
	c.gtld-servers.net.
	com.                    3600    IN      NS     
	f.gtld-servers.net.
	com.                    3600    IN      NS     
	l.gtld-servers.net.
	com.                    3600    IN      RRSIG   NS 8 1 172800
	20110516041548 20110509030548 36713 com.
	tx37OldYt1fgXR+rD/3ACR1BD3wR11m7Qtdslz1U9UyiBNbUK/swm4Uz
	/49U4A9Ndf5vCiybG0NJbBmEhJ2Gc+YzXf1Pv6NBZcEW63123NJf/igx
	z1DKZAJeF+HAlIhy/6Iuwvq8Z83+30kBC1G9ocRiUG5/CXr2X+WSSfFl Xsk=

	;; Query time: 218 msec
	;; SERVER: 10.10.10.100#53(10.10.10.100)
	;; WHEN: Mon May  9 15:18:31 2011
	;; MSG SIZE  rcvd: 637