Disable DNSSEC Validation for selected Domains

Stefan.Lasche at t-systems.com Stefan.Lasche at t-systems.com
Tue Jan 13 13:53:10 UTC 2015

Hi Mukund 

and thanks a lot for pointing that out!
It is already more than I was hoping for :)


> BIND will get support for negative trust anchors in 9.11, which will provide the feature that you seek. An implementation is now in the master branch.
> https://tools.ietf.org/html/draft-livingood-negative-trust-anchors-07
> In partnership with our subscription customers who support future feature development by helping to fund our engineering work, we currently have a subscription branch where features critical to their current needs are backported from master and are currently available for their use. We are trialling the > negative trust anchors feature there now. If you absoutely need this now, please contact ISC about it.
> Another option is to run the master branch, but we don't recommend it as it is a development branch with several new features, some of which may be unstable or changing rapidly. Negative trust anchors will be released to the public in the 9.11 release.
>		Mukund

More information about the bind-users mailing list