[Unbound-users] DNSSEC mismatch between Bind 9.7 and Unbound

Florian Weimer fw at deneb.enyo.de
Sat Nov 6 16:42:17 UTC 2010


* Tony Finch:

> On Fri, 5 Nov 2010, W.C.A. Wijngaards wrote:
>>
>> The trouble is that bind does not respond with the correct response to
>> the query for the DS.  Unbound can do nothing but fail the query.
>
> Isn't the more fundamental problem that someone tried to put a CNAME at
> the zone apex of lipsofsuna.org?

Yes, but it's still a major bug if correctly signing a parent makes
non-signed child zones unavailable which have been working before.



More information about the Unbound-users mailing list