[Unbound-users] SERVFAIL for an abbreviated TLD local zone

martin f krafft madduck at madduck.net
Mon Dec 8 07:07:49 UTC 2014


also sprach Jeroen Massar <jeroen at massar.ch> [2014-12-08 07:41 +0100]:
> As the root does not know your custom zone, that custom zone is
> not properly signed and voila ;)

Ah, of course (Thanks also to Robert!)

I think the real solution is to sign the zone. DNSSEC is on my to-do
list anyway — for years ;)

-- 
@martinkrafft | http://madduck.net/ | http://two.sentenc.es/
 
consciousness: that annoying time between naps.
 
spamtraps: madduck.bogus at madduck.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: digital_signature_gpg.asc
Type: application/pgp-signature
Size: 1103 bytes
Desc: Digital signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20141208/f18482b4/attachment.bin>


More information about the Unbound-users mailing list