broken trust chain on forwarder

Tony Finch dot at
Mon Oct 3 09:19:26 UTC 2016

/dev/rob0 <rob0 at> wrote:
> > 3) Change from a forwarder to a slave and thereby become
> > authoritative and no longer have any need of DNSSEC validation on
> > this zone.
> Did you try with stub or static-stub?

Stub and static-stub just change how BIND finds a zone's nameservers; they
don't affect validation.

f.anthony.n.finch  <dot at>  -  I xn--zr8h punycode
Fastnet: Southeast 5 to 7. Rough or very rough. Rain at times in west. Good,
occasionally poor in west.

More information about the bind-users mailing list