Holger Zuleger (Holger.Zuleger) writes:
> Even BIND as a (local) forwarding name server is not able to use
> GSS-TSIG to protect the communication with the recursive name server.

        You can setup TSIG between recursive nameservers.

> Please correct me if I'm wrong.
> I'm looking for a TSIG aware stub-resolver for years.

        Well, Unbound does provide the necessary pieces to build one,
        but I've yet to see the OS stub resolver implement TSIG.

        Phil
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to