On 09/02/14 18:04, Dave Taht wrote:
Got the right time?
See my previous reply: the signature inception time for .dk I'm seeing is quite recent, so there's not much slack to play with.
I have no idea how to deal with the time headache still, besides adding an un-validating-resolver to ntpdate, and sanity checks in dnsmasq like (if system time is< my build time, don't do dnssec) - but the latter is imperfect. http://www.bufferbloat.net/issues/113
Cheers, Simon. _______________________________________________ Cerowrt-devel mailing list [email protected] https://lists.bufferbloat.net/listinfo/cerowrt-devel
