Am 24.01.2017 um 22:11 schrieb Jac Backus: > But for mail.crypsys.nl dnsviz.net shows only an A record, but no TXT record:
http://dnsviz.net/d/mail.crypsys.nl/dnssec/ - click "update now" - click "Advanced options (forced ancestor analysis, recursive, explicit delegation, etc.)" - select "TXT" as Extra Typ - click Analyze - DNSSEC and Response proof the TXT-Record has an invalid signature Disable DNSSEC validation for that domain in your unbound.conf (domain-insecure: mail.crypsys.nl) and try to contact the domain owner. Andreas
