> On 7. 10. 2026, at 10:52, Bas Westerbaan 
> <[email protected]> wrote:
> 
> Are you planning to add support for downgrade protection?

Hi Bas,

I am not yet convinced that this is needed at this point in time. I still have 
the scars when
Unbound implemented downgrade protection and .CZ was changing the algorithms and
Olaf called (using the phone!) to CZ.NIC that Unbound fails to validate the 
whole .CZ.

Ondrej
--
Ondřej Surý (He/Him)
[email protected]

A gentle nudge is always appreciated if I take a little longer to reply.

_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to