Florian Weimer <f...@deneb.enyo.de> wrote: > > Doesn't the DNSSEC-based mitigation rely on RRSIGs whose validity does > not extend too far into the future?
It depends on the TTL of the DS record or its proof of nonexistence. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ North FitzRoy, Sole: Northerly or northwesterly 5 to 7. Moderate becoming rough. Occasional drizzle. Good, occasionally moderate. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
