Re: DNSKEY NODATA responses not cached

2011-01-12 Thread Alexander Gall
On Tue, 11 Jan 2011 18:46:39 +0100, Kalman Feher said: > I'm curious whether the domain in question had a DS in the parent zone? No, it didn't. The effect is there even if the parent zone does not support DNSSEC. I stumbled over this while I was checking whether my tools could properly handle

Re: DNSKEY NODATA responses not cached

2011-01-11 Thread Kalman Feher
I'm curious whether the domain in question had a DS in the parent zone? On 11/01/11 4:52 PM, "Chris Thompson" wrote: > On Jan 11 2011, Alexander Gall wrote: > >> It appears that NODATA responses for qtype=DNSKEY are not cached if >> DNSSEC validation is enabled (tested with 9.7.2-P3). What is

Re: DNSKEY NODATA responses not cached

2011-01-11 Thread Chris Thompson
On Jan 11 2011, Alexander Gall wrote: It appears that NODATA responses for qtype=DNSKEY are not cached if DNSSEC validation is enabled (tested with 9.7.2-P3). What is the rationale behind this? I confirm the effect (same release). Or rather, the NODATA does get cached, as shown by a "!DNSKEY"

DNSKEY NODATA responses not cached

2011-01-11 Thread Alexander Gall
It appears that NODATA responses for qtype=DNSKEY are not cached if DNSSEC validation is enabled (tested with 9.7.2-P3). What is the rationale behind this? -- Alex ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listi