> and lastly cname breaks dnssec, 

Err, what?

CNAME works fine with DNSSEC.  CNAME at zone apex with other RR types can break 
DNSSEC since CNAME with other RRs at the same label (anywhere) isn’t supposed 
to work. However, since people want to do it, some folks have come up with 
solutions that may or may not work with DNSSEC.

Regards,
-drc

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to