On Sat, Mar 10, 2018 at 06:30:41PM +0000, Tony Finch wrote: > I have said this already so I'm at risk of being a bore, but it would be > super cool if BIND could make use of the DS records (or PNEs) it gets in > referrals, instead of re-fetching them during validation. It should > provide a nice speed-up, as well as allowing the validator to avoid > looking into insecure subtrees, which will have the side-effect of > avoiding problems with apex CNAMEs.
Yep, that's one of the approaches we've discussed. -- Evan Hunt -- [email protected] Internet Systems Consortium, Inc. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
