Florian Weimer <[email protected]> wrote: > > Doesn't the DNSSEC-based mitigation rely on RRSIGs whose validity does > not extend too far into the future?
It depends on the TTL of the DS record or its proof of nonexistence. Tony. -- f.anthony.n.finch <[email protected]> http://dotat.at/ North FitzRoy, Sole: Northerly or northwesterly 5 to 7. Moderate becoming rough. Occasional drizzle. Good, occasionally moderate. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
