Re: Answers for www.dnssec-failed.org with dnssec-validation auto;

2024-04-18 Thread Bob McDonald
Thanks Mark. It's right there in the log. Bob -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mail

Broken DNS QNAME Recovery

2024-04-18 Thread Crist Clark
First, yes, I know. Their DNS is broken. They should fix their DNS. We shouldn't need to make QNAME-minimization work around broken DNS. Name and shame a domain name in question, e1083.d.akamaiedge.akamai.csd.disa.mil The problem I see: akamai.csd.disa.mil is a delegated zone. All four name