NSEC3 records not available through a BIND resolver = 9.5?

2010-03-17 Thread Stephane Bortzmeyer
I cannot get the NSEC3 records through a BIND resolver if it is version = 9.5: % dig +dnssec jhfgTCFGD564564.org ; DiG 9.5.1-P3 +dnssec @dnssec.generic-nic.net jhfgTCFGD564564.org ; (2 servers found) ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY,

Re: NSEC3 records not available through a BIND resolver = 9.5?

2010-03-17 Thread Hauke Lampe
Stephane Bortzmeyer wrote: I cannot get the NSEC3 records through a BIND resolver if it is version = 9.5: % dig +dnssec jhfgTCFGD564564.org If BIND = 9.6, it works (or with Unbound). Yes, NSEC3 support was added in 9.6 but, for older BINDs, TYPE50 (NSEC3) should be an