[Unbound-users] DNSSEC mismatch between Bind 9.7 and Unbound

[Florian Weimer]

* Tony Finch:

> On Fri, 5 Nov 2010, W.C.A. Wijngaards wrote:
>>
>> The trouble is that bind does not respond with the correct response to
>> the query for the DS.  Unbound can do nothing but fail the query.
>
> Isn't the more fundamental problem that someone tried to put a CNAME at
> the zone apex of lipsofsuna.org?

Yes, but it's still a major bug if correctly signing a parent makes
non-signed child zones unavailable which have been working before.