Disable DNSSEC Validation for selected Domains

Tony Finch dot at dotat.at
Tue Jan 13 11:51:59 UTC 2015

Stefan.Lasche at t-systems.com <Stefan.Lasche at t-systems.com> wrote:
> I know that BIND has no feature to disable DNSSEC validation for
> selected Zones/Domains (when working as a recursor).

BIND 9.11 will have negative trust anchors.

f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Fair Isle: Southwest 6 to gale 8, occasionally severe gale 9 at first. Very
rough or high, but rough east of northern isles. Thundery wintry showers.
Good, occasionally poor.

More information about the bind-users mailing list