In message <69beb178-f30d-4ac2-8e7a-b13c1f5f8...@menandmice.com>, Chris Buxton writes: > On Jun 13, 2009, at 4:59 AM, Erik Lotspeich wrote: > > Is it normal that a validating resolver can't validate a domain it is > > authoritative for? > > Absolutely. As Alan Clegg wrote not long ago on this list, this is why > a DNSSEC validating resolver should not be authoritative for any > signed zones. > > Chris Buxton > Professional Services > Men & Mice
That's also why there is the "recursion-only" option with view selection. > _______________________________________________ > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users