* Kevin Darcy:

> I'm not sure those recommendations apply as strongly as they used
> to. Now we have views and (if the original poster were to upgrade to
> 9.4.x or higher) fine-grained control over access to cached data.

Views are probably okay.  Access control is insufficient, especially
if you register domains on behalf of customers.  Typically, you need
to activate these domains prior to obtaining the delegation, and the
recursor will return incorrect data when you fail to actually get the
delegation.
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to