On Feb 25, 2013, at 8:25 PM, Robert Moskowitz wrote: > So should I change this to an include and put dnssec-validation back to yes?
No. "dnssec-validation auto;" is correct for 90% of cases. An Internet validating resolver should almost certainly use this. Mark is simply being precise and complete in his explanation. Chris Buxton BlueCat Networks _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
