I know DLV probably won't live forever, but lookaside zones might for some time.

It doesn't look as it bind distinguishes between a signature in the parent, or a signature in DLV (with "dnssec-lookaside auto"). Am I missing something?

If I'm not, could the log message:

validating X: ZONE RR got insecure response;parent indicates it should be secure

...be disambiguated? Maybe:

[parent|<lookaside zone>] indicates it should be secure

Version is 9.9.3-rpz2+rl.13204.02-P2
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to