On Mon, May 09, 2011 at 12:43:43PM +0200,
 lst_ho...@kwsoft.de <lst_ho...@kwsoft.de> wrote 
 a message of 34 lines which said:

> That means higher grade hashes were invalid and no fallback will be
> done to the lower grade in this case?

Correct. And this seem to be on purpose (to avoid a downgrade attack
altough, in typical DNSSEC fashion, this will break a valid zone
without enhancing security).
_______________________________________________
Unbound-users mailing list
Unbound-users@unbound.net
http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users

Reply via email to