[Unbound-users] DLV anchor and unsigned domains

Alan Jurcic Alan.Jurcic at CARNet.hr
Fri Mar 28 10:16:19 UTC 2014


On 28.03.14 at 11:01, W.C.A. Wijngaards wrote:
> 
> You log stops just when it gets interesting - what it does with the
> NSEC3 response to a DLV lookup for your DLV repository.  But anyway, I
> can see why it fails.  Unbound only supports DLV with NSEC, so that it
> can do aggressive negative caching with that.  It has not implemented
> the mandatory aggressive negative DLV caching for NSEC3.  You should
> change your private dlv repository and sign it with NSEC.
> 

OK, I'm glad it's not a bug :)

Thanks for helping out.

Alan



More information about the Unbound-users mailing list