Re: Slightly Off-Topic: Dealing with DNSSEC Bogus Data

Thanks Tony for the feedback. -- Jorge ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Slightly Off-Topic: Dealing with DNSSEC Bogus Data

On 06/08/2014 01:59 PM, Evan Hunt wrote: > The answer is still no. We do have "negative trust anchors" on the > roadmap for 9.11, but that's not scheduled for release until 2015. Thank you Evan. I'm glad to know this is coming. Regards, Jorge ___ Plea

Re: Slightly Off-Topic: Dealing with DNSSEC Bogus Data

Jorge Fábregas wrote: > > This change is going to impact thousands of users for us and I'm a bit > worried about it. How do you deal with DNSSEC bogus data? We don't do anything special to reduce the problem. It has not caused noticable pain or complaints from our users. We have I think had on

Re: Slightly Off-Topic: Dealing with DNSSEC Bogus Data

> I'm about to start DNSSEC validation on my resolvers (BIND 9.8) but > wanted to know beforehand if there was a way to disable DNSSEC > validation for particular domains. I searched the archives and found > the answer to be "no" (at present time). The answer is still no. We do have "negative tr

Slightly Off-Topic: Dealing with DNSSEC Bogus Data

Hi everyone, I'm about to start DNSSEC validation on my resolvers (BIND 9.8) but wanted to know beforehand if there was a way to disable DNSSEC validation for particular domains. I searched the archives and found the answer to be "no" (at present time). This change is going to impact thousands o