Thank you Mark. Your insight and detail is always helpful and immensely appreciated. For what it's worth, I will make it a point to reach out to the relevant parties to grouse to the extent possible about the damage done by DNS servers authoritative for DNSSEC signed zones that aren't properly supporting EDNS.
many thanks, mark _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users