On Fri, 25 Oct 2002, Michael Richardson wrote: > Is there a way to configure bind9 (2002/7/22 snapshot) to only return > DNSSEC signed data via lwres? why would you like to do that? if the application cares it could use getrrsetbyname and only accept answer where RRRSET_VALIDATED is set. that is what I've done in my SSHFP implementation for OpenSSH. jakob