DNSSEC only

[Michael Richardson]

>>>>> "Jakob" == Jakob Schlyter <jakob at crt.se> writes:
    >> Because I have applications which I do not want to, or can't modify, that I
    >> wish to "secure".   This is primarily an experiment. I will eventually modify
    >> the applications.

    Jakob> ok, so if the answer is not authenticated it should not be fed to the
    Jakob> application? this could probably be done using named together with a small
    Jakob> port 53 filtering apps I'd guess.

  Yes, it could be done that way. 
  I thought that bind9 had this option somewhere.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr at sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [