On 06/20/2018 04:59 PM, Tom Pusateri wrote: > DNSSEC will tell you the answer you get is correct but it could be a > to a > different question or be incomplete. Can you elaborate on that point. I believe in signed zones you are able to verify almost everything, in particular existence of the queried-for RRset and its exact value, except for details like current TTL.
--Vladimir _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
