<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p>On a resolver running ISC BIND 9.16.36 with "dnssec-validation
auto;" I am writing "category dnssec" to a log file at "severity
info;" When I look in the resulting log file, I'm guessing that
lines like this:</p>
<p><font face="monospace">validating com/SOA: got insecure response;
parent indicates it should be secure</font></p>
<p>Are an indication I have a problem I should investigate.</p>
<p>My question is: Are there other strings I should be reacting to
in that log?</p>
<p><br>
</p>
<p>I interpret the many lines like this:</p>
<p><font face="monospace">validating wunderkind.co/SOA: no valid
signature found</font></p>
<p>to mean "We looked for signing information for wunderkind.co and
found none. That's cool, we didn't expect them to be."<br>
</p>
<pre class="moz-signature" cols="72">--
--
Do things because you should, not just because you can.
John Thurston 907-465-8591
<a class="moz-txt-link-abbreviated" href="mailto:John.Thurston@alaska.gov">John.Thurston@alaska.gov</a>
Department of Administration
State of Alaska</pre>
</body>
</html>