On Mon, May 09, 2011 at 12:43:43PM +0200, lst_ho...@kwsoft.de <lst_ho...@kwsoft.de> wrote a message of 34 lines which said:
> That means higher grade hashes were invalid and no fallback will be > done to the lower grade in this case? Correct. And this seem to be on purpose (to avoid a downgrade attack altough, in typical DNSSEC fashion, this will break a valid zone without enhancing security). _______________________________________________ Unbound-users mailing list Unbound-users@unbound.net http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users