insecurity proof failed for a domain

Matus UHLAR - fantomas uhlar at fantomas.sk
Tue Dec 14 15:58:08 UTC 2021


On 13.12.21 08:18, John Thurston wrote:
>If you update your resolver to 9.16, I think you can do exactly what 
>you want with the "validate-execpt" option.
>
>{rolls eyes} been there. done that. for exactly the same reason :/

thanks, this helped.
I assume I need to put "local" into validate-except {}.
This should not be a problem since .local is reserved.

I guess .local should have negative trust anchor in root zone.

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The early bird may get the worm, but the second mouse gets the cheese.


More information about the bind-users mailing list