Understanding TTL in "rndc dumpdb"-output

Hi After querying my resolver for "testbla11.example.com", I receive a NXDOMAIN response with a minimum-ttl (in the soa) of 3600. When I afterwards dump the cache of my resolver (9.12.2-P1) with "rndc dumpdb" and look for the negative ttl, then a value much bigger than 3600 is shown (608363):

BIND chasing DNSKEY breaks island-of-trust zone

Hello all, DNSSEC validating BIND resolver could not resolve cdn.ckeditor.com. Meanwhile the zone owner "fixed" the problem and the domain name can be resolved again. However, I wonder if BIND should do better for an island-of-trust zone. BIND resolver: (1) ask upstream com. servers for cdn.cked

Re: BIND9 and AS112

Hi, reviving an old thread with some new information: > On Fri, Mar 09, 2018 at 12:32:41PM +0300, > Diarmuid O Briain wrote > a message of 122 lines which said: > >> Mar 09 08:11:43 as112 named[3787]: internal_send: 2620:4f:8000::42#53: >> Invalid argument >> Mar 09 08:11:43 as112 named[3787