On Wed, 11 Nov 2009, Florian Weimer wrote:
Have you installed any trust anchors in the resolver? (I don't think so, the packet numbers are a bit on the lower side for that.)
I didn't. I was mostly interested in the "DURZ" case where the root zone becomes signed but people aren't configuring trust anchors. And I'm only looking at the traffic between resolver and authorities. What do you mean by "packet numbers?" Number of packets or size of packets? Duane W. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop