On Fri, Nov 07, 2008 at 11:16:45AM +0200, Benzi Mizrahi <[EMAIL PROTECTED]> wrote a message of 21 lines which said:
> it is written "Use resolvers that are DNSSEC capable...". Resolvers, not stub resolvers. > My question is what is resolver to thousands of computers scattered > all over the campus network? I assume they do not resolve completely themselves but they talk to two or three "real" resolvers. In that case, you may enable DNSSEC only on those two or three.