RE: Some operational questions about TSIG / XoT

Hi Michael! I think you mix up two unrelated topics. One, how your name servers are connected together and how routing and High-Availability is managed in your (virtual) network. The second thing is which protocol to use for zone transfers. IMO they have nothing to do with each other. For the

Questions about "dnssec validation" statement

I was wondering if dnssec validation could be set to auto in the options section and then set it to 'no' in a particular zone? We would like to use "dnssec validation auto" but a few forwarding zones we have, we know do not use dnssec and queries fail if it's not set to no. Thanks Chris Isa