Subject: Re: interaction of validation and local stubs and forwarders Date: Tue, Jan 13, 2026 at 03:09:19PM +0100 Quoting Petr Menšík via Unbound-users ([email protected]): > I think you want to be independent on parent domain. That should be possibly > by configuring your own trust anchor for namn.se KSK key. > > Then it should be possible to query your DS or DNSKEY, choose only KSK key > and add it as trust anchor to your validating clients. Unbound should > validate only up to first trusted anchor. If that is your domain, it should > not need to validate any parent records.
Yes, that makes sense for when the child is signed. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE SA0XLR +46 705 989668 Now I'm concentrating on a specific tank battle toward the end of World War II!
signature.asc
Description: PGP signature
