Holger Zuleger (Holger.Zuleger) writes: > Even BIND as a (local) forwarding name server is not able to use > GSS-TSIG to protect the communication with the recursive name server.
You can setup TSIG between recursive nameservers. > Please correct me if I'm wrong. > I'm looking for a TSIG aware stub-resolver for years. Well, Unbound does provide the necessary pieces to build one, but I've yet to see the OS stub resolver implement TSIG. Phil _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop