> Actually, I was misremembering this. Unbound's harden-below-nxdomain > behavior is much more conservative than resimprove, since it only > considers NXDOMAINs that are DNSSEC-secure. But it still does use an > "upwards" algorithm (successively strip labels off the QNAME) in a > hash-based cache to find an applicable NXDOMAIN.
So it does this for every query? _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
