[SUSPECT EMAIL: No Reputation] Re: unbound API and authenticated data

Anand Buddhdev anandb at ripe.net
Mon Aug 3 09:54:38 UTC 2020


Hello Anthony,

On 22 July, George very clearly wrote to you:

"However cloudflare.net is a DNSSEC signed domain, whereas google.com is 
not."

Your log file below also shows unbound resolving "www.google.com", 
getting an answer, and saying that it's not secure. All of this is 
consistent, because "google.com" is NOT a signed domain. So what's the 
problem?

Regards,
Anand

On 01/08/2020 01:59, Modster, Anthony via Unbound-users wrote:

> Hello George
> 
> I setup forwarding to 8.8.8.8.
> The unbound API still indicates the resolve is not secure.
> My root.key is from iana.
> 
> What should I check ?
> 
> test-unbound main start

[snip]

> libunboundclient:[31179]: ResolveURL IP address 74.125.138.104 (domain name=www.google.com).
> libunboundclient:[31179]: ResolveURL result is insecure (IP address 74.125.138.104, domain name=www.google.com).
> main resolve www.google.com 74.125.138.104 (cnt 1).
> UnboundStop stopping unbound (unbound pid 31193).
> test-unbound main end


More information about the Unbound-users mailing list