-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> "dnssec-lookaside auto;" only pulls the "dlv.isc.org" key out of > that file. The root's key is just for reference in BIND 9.7.x. If > you just include that file into named.conf it will load the root's > key and org's answers will validate. > e.g. > include "/etc/named.iscdlv.key"; > BIND 9.8 has "dnssec-validate auto;" which pulls the root's key out > of that file. Thanks! That works. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFOZO21L6j7milTFsERAruYAJ9cKNZQQwPmr1dzlf0ctwL3XbabFACeLFCN mrsMpO2wT/oMRQa89hbojiY= =CGzL -----END PGP SIGNATURE----- _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users