On Jan 11 2011, Alexander Gall wrote:
It appears that NODATA responses for qtype=DNSKEY are not cached if DNSSEC validation is enabled (tested with 9.7.2-P3). What is the rationale behind this?
I confirm the effect (same release). Or rather, the NODATA does get cached, as shown by a "!DNSKEY" count in the statistics display, but a new request goes back to the authoritative servers again anyway, as shown by the outgoing queries count and by the SOA in the authority section of the NODATA response having its original value. -- Chris Thompson Email: c...@cam.ac.uk _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
