Append a Hard-coded Text Tuple into Additional Section of "dig" Feature
Tony Finch
dot at dotat.at
Fri Jun 17 10:19:47 UTC 2016
Darcy Kevin (FCA) <kevin.darcy at fcagroup.com> wrote:
> My understanding is that the "extra" stuff wouldn't have any signature
> at all.
I'm not sure if the question was that well specified :-)
> Wouldn't that break DNSSEC if the rest of the response had signatures?
> Or does the DNSSEC-validation algorithm support "hybrid" responses like
> that?
I believe BIND works more like the latter but unbound works more like the
former.
Tony.
--
f.anthony.n.finch <dot at dotat.at> http://dotat.at/ - I xn--zr8h punycode
Bailey: Variable becoming southeast 3 or 4, increasing 5 or 6. Slight or
moderate. Rain later in southwest. Good.
More information about the bind-users
mailing list