In message <[email protected]>, Rubens Kuhl writes: > > What I can tell you is that registries and applicants suggested ICANN to > not require DNSSEC-signign of wildcard controlled interruption due to > likely differences in resolver behaviour, including some known bugs. > > Rubens
OPTOUT + wildcard really doesn't make sense. If you are going to sign a zone with a wildcard record just don't set optout. That said I've opened a ticket to fix the validator. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
