AW: AW: Disable DNSSEC Validation for selected Domains
Stefan.Lasche at t-systems.com
Stefan.Lasche at t-systems.com
Wed Jan 14 10:42:56 UTC 2015
>> Our customer uses a fictional Toplevel Domain[...]
>
> Can you flip the problem on its head, by signing the fictional TLD and deploying managed-keys (or trusted-keys) on the validating resolvers?
>
> Graham
Unfortunately we can't sign the fictional TLD, since we are neither master nor slave of the zone.
We are just forwarding our queries to a foreign authorative Server.
Grüße,
Stefan
More information about the bind-users
mailing list