I cannot get the NSEC3 records through a BIND resolver if it is
version = 9.5:
% dig +dnssec jhfgTCFGD564564.org
; DiG 9.5.1-P3 +dnssec @dnssec.generic-nic.net jhfgTCFGD564564.org
; (2 servers found)
;; global options: printcmd
;; Got answer:
;; -HEADER- opcode: QUERY,
Stephane Bortzmeyer wrote:
I cannot get the NSEC3 records through a BIND resolver if it is
version = 9.5:
% dig +dnssec jhfgTCFGD564564.org
If BIND = 9.6, it works (or with Unbound). Yes, NSEC3 support was
added in 9.6 but, for older BINDs, TYPE50 (NSEC3) should be an
2 matches
Mail list logo