BIND 9.9.0 is now available

[Phil Mayers]

On 02/03/12 10:13, Matus UHLAR - fantomas wrote:
> On 29.02.12 17:53, Michael McNally wrote:
>> NXDOMAIN redirection is now possible. This enables a resolver
>> to respond to a client with locally-configured information
>> when a query would otherwise have gotten an answer of "no
>> such domain". This allows a recursive nameserver to provide
>> alternate suggestions for misspelled domain names. Note that
>> names that are in DNSSEC-signed domains are exempted from
>> this when validation is in use. [RT #23146]
>
> just by signing? so I can spare all our domains from being misused by
> such shit just by signing them?
>

For the "bind" implementation, yes.

For the zillions of other crappy DNS servers and providers that to 
NXDOMAIN redirection, probably not.

(If the *clients* did DNSSEC-checking, then yes)