Ubuntu 11.10 (Oneiric Ocelot) Install Notes
JINMEI Tatuya / 神明達哉
jinmei at isc.org
Mon Feb 13 21:35:38 UTC 2012
At Sun, 12 Feb 2012 18:50:23 -0800 (PST),
"Waitman Gobble" <uzimac at da3m0n8t3r.com> wrote:
> I don't see NSEC3 in 2012-01-27 :)
> actually I'm still kinda new to DNSSEC. As a test I followed the instructions for recursive server, which tells me to remove b10-auth. The docs say bind10 supports DNSSEC with b10-auth. When I dig @localhost +dnssec {mydomain} I don't get any DNSSEC data... So obviously my local recursive isn't authoritative but I'm missing the data. Anyhow there's much to learn and tinker with here.
The resolver currently doesn't support DNSSEC at all.
b10-auth fully supports DNSSEC (with some bugs) if you use the SQLite3
data source. The main goal for the next snapshot release is to
support NSEC3 in the in-memory data source for b10-auth. NSEC won't
yet be available in that version. And, I'm afraid we won't be able to
complete the DDNS support within year 3 (i.e. by the end of March).
---
JINMEI, Tatuya
Internet Systems Consortium, Inc.
More information about the bind10-users
mailing list