DNSSEC validation on combined auth+recursive server

2011-01-06 Thread Eivind Olsen
Hello. I seem to remember seeing something about DNSSEC validation not working when a BIND server is used both to serve the DNSSEC signed zone authoritatively, and as a resolver? Unfortunately, I haven't managed to find this information again, and now I'm wondering if it was all in my head.

Re: DNSSEC validation on combined auth+recursive server

2011-01-06 Thread Eivind Olsen
(Resending it here, didn't mean to reply just to you Alan) On 1/6/2011 3:38 AM, Eivind Olsen wrote: (Yes, I know it's best practice to combine the authoritative + recursive functionality) [...] it's NOT best [...] Yep, I knew that. Embarassing of me to miss that slightly important NOT-word