AW: AW: Disable DNSSEC Validation for selected Domains

Stefan.Lasche at t-systems.com Stefan.Lasche at t-systems.com
Wed Jan 14 10:42:56 UTC 2015


>> Our customer uses a fictional Toplevel Domain[...]
>
> Can you flip the problem on its head, by signing the fictional TLD and deploying managed-keys (or trusted-keys) on the validating resolvers?
>
> Graham

Unfortunately we can't sign the fictional TLD, since we are neither master nor slave of the zone.
We are just forwarding our queries to a foreign authorative Server.

Grüße,
Stefan




More information about the bind-users mailing list