<div dir="ltr"><div dir="ltr"><div>Hello Renzo.</div><div>There is no point spending
time answering these questions for a version of BIND that is now
obsolete. As I suggested in your other post, follow the instructions in
the KB article and install 9.20. After that, if you still have
questions, come back.</div><div><br></div><div>Please also read the documentation at <a href="https://bind9.readthedocs.io/en/latest/reference.html" target="_blank">https://bind9.readthedocs.io/en/latest/reference.html</a> , which should hopefully answer many of your questions before you get as far as the list.</div><div><br></div><div>Cheers, Greg</div></div><br></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Mon, 11 Aug 2025 at 16:00, Renzo Marengo <<a href="mailto:buckroger2011@gmail.com">buckroger2011@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>In bind 9.16.23 dnssec-enable is deprecated and my server is only cache server which forwards all requests; It is not authoritative for any zones.</div><div><br></div><div></div><div>Dnssec is used to sign dns requests of my domain or all dns requests which server makes?</div><div><br></div><div>0. dnssec-enable no </div><div> default is to enable dnssec, but I want to disable I can make it ?</div><div></div><div><br></div><div></div><div>1. dnssec-validation no</div><div>
Can I delete this entry if I wnat to disable dnssec ?
</div><div><br></div><div>2. bindkeys-file "/etc/named.iscdlv.key"</div><div> Can I delete this entry ? Eventually Bind would use built-in keys</div><div><br></div><div>3. managed-keys-directory "/var/named/dynamic"</div><div> see above, I can delete this entry because I'm not interesting to dnssec</div><div><br></div><div>4. session-keyfile "/run/named/session.key"</div><div> I can leave it ?</div><div><br></div><div><br></div></div>
-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div>