Exclude a domain from DNSSEC validation, like Unbound's "domain-insecure".

Mark Andrews marka at isc.org
Thu Feb 7 00:15:16 UTC 2013


In message <201302062107.r16L7f9b066794 at calcite.rhyolite.com>, Vernon Schryver 
> 
> All of that gets back to honesty being the best policy and letting other
> people fix their own stuff in their own time.

And the more people that validate the bigger the peer presure will
be to fix dnssec problems promptly.  However to do that you need
working whois services to be able to contact the administrators of
the zone by other means.  Gov's whois service is a joke.  No contact
information at all.  Can't even list the main switchboards?

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the bind-users mailing list