On Fri, 05 Feb 2010 08:18:35 +1100, Mark Andrews <ma...@isc.org> said:
> In message <19306.52059.975062.462...@hadron.switch.ch>, Alexander Gall > writes: >> >> All of those are NSEC3-agnostic. They should not do any DNSSEC >> processing for the ch zone, because they don't support algorithm #7. > Yes and no. Just because you are using a algorithm that is unsupported > doesn't mean that you won't get queries looking for the break point > between supported and unsupported algorithms. DS queries are used > to find that break point. But isn't the break point at the DLV/trusted-key level for ch? -- Alex _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
