message is bogus, non secure rrset with Unbound as local caching resolver

Havard Eidnes he at uninett.no
Wed Mar 2 23:27:55 UTC 2016


> The "right" thing is to have RRSIGs for all elements of the
> answer and authority sections.  This is mandated by
> RFC4034,4035.  All the RRsets in the answer and authority
> section MUST validate to mark the response as valid.

FYI, I've submitted a tentative bug report to the BIND maintainers
based on my message and the one I'm replying to here, RT#41844.

Regards,

- Håvard



More information about the Unbound-users mailing list