BIND 9.10.0b1 is now available

Evan Hunt each at isc.org
Mon Mar 17 22:02:27 UTC 2014


On Mon, Mar 17, 2014 at 11:41:07PM +0200, Mark Elkins wrote:
> I had not thought about that. BIND compiled with pkcs11 and no openssl
> *has* to be used with an HSM (soft and Thales being the two tested
> types) presumably as a Zone signer and can *not* be used as a DNSSEC
> validating resolver.... (IMR)

You *can* use it as a validating resolver, but it probably wouldn't
be very efficient and I don't know why you'd want to. :)

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.


More information about the bind-users mailing list