On Mon, Nov 17, 2014 at 02:16:22PM -0800, Doug Barton wrote:
> That seems like something that should be fixable in BIND, yes? (And 
> thanks for doing that testing, btw)

Yes, by using two views and slaving the root in one of them and validating
in the other one, like it recommends in the draft. :)

With a single view, if you're authoritative for a zone, then you're
the authority, period.  You *know* the corect answer.  Validating yourself
to find out whether you're lying to yourself would be somewhat silly.

-- 
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to