> and lastly cname breaks dnssec, Err, what?
CNAME works fine with DNSSEC. CNAME at zone apex with other RR types can break DNSSEC since CNAME with other RRs at the same label (anywhere) isn’t supposed to work. However, since people want to do it, some folks have come up with solutions that may or may not work with DNSSEC. Regards, -drc
signature.asc
Description: OpenPGP digital signature
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop