broken trust chain on forwarder

Tony Finch dot at dotat.at
Mon Oct 3 09:19:26 UTC 2016


/dev/rob0 <rob0 at gmx.co.uk> wrote:
>
> > 3) Change from a forwarder to a slave and thereby become
> > authoritative and no longer have any need of DNSSEC validation on
> > this zone.
>
> Did you try with stub or static-stub?

Stub and static-stub just change how BIND finds a zone's nameservers; they
don't affect validation.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/  -  I xn--zr8h punycode
Fastnet: Southeast 5 to 7. Rough or very rough. Rain at times in west. Good,
occasionally poor in west.


More information about the bind-users mailing list