Questions about "dnssec validation" statement

[Evan Hunt]

On Thu, Mar 06, 2025 at 12:56:08PM +0000, Chris Isaksen wrote:
> I was wondering if dnssec validation could be set to auto in the options
> section and then set it to 'no' in a particular zone?
> 
> We would like to use "dnssec validation auto"  but a few forwarding zones
> we have, we know do not use dnssec and queries fail if it's not set to
> no.

"validate-except { domain1; domain2; ... };"

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.