Holger Zuleger (Holger.Zuleger) writes:
> Even BIND as a (local) forwarding name server is not able to use
> GSS-TSIG to protect the communication with the recursive name server.
You can setup TSIG between recursive nameservers.
> Please correct me if I'm wrong.
> I'm looking for a TSIG aware stub-resolver for years.
Well, Unbound does provide the necessary pieces to build one,
but I've yet to see the OS stub resolver implement TSIG.
Phil
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop