* Alexander Gall: > More data points from two authoritative servers for the ch ccTLD: > 40-50% (I've attached the relevant DSC graphs for the past month). > > I looked more closely on one of the servers. Out of about 22 million > queries in the past 11 hours, about 10 million from 161000 different > sources had the DO flag set.
Interesting, thanks. It seems that the BIND 9.3 recursor sets the DO bit by default, even if it does not support DNSSEC on the client interface without "dnssec-enable yes;" (IOW, the DO bit is ignored there). (Unbound sets the DO bit, too, but it processes it on the responder side as well.) -- Florian Weimer <[EMAIL PROTECTED]> BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99 _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
