Re: Dig 9.9.1 AD-bit

2012-08-04 Thread Tony Finch
On 3 Aug 2012, at 02:25, "Marco Davids (SIDN)" wrote: > Dig 9.9.1 is setting the AD-bit in queries by default. > Does anyone know why? It means "I want the results of DNSSEC validation but not all the RRSIG and NSEC records I would get from DO=1." Tony. -- f.anthony.n.finchhttp://dotat.at/

Re: Dig 9.9.1 AD-bit

2012-08-02 Thread Jeremy C. Reed
On Thu, 2 Aug 2012, Marco Davids (SIDN) wrote: > Dig 9.9.1 is setting the AD-bit in queries by default. > > Does anyone know why? 3205. [func] Upgrade dig's defaults to better reflect modern nameserver behaviour. Enable "dig +adflag" and