disable dnssec for particular domain

[Reindl Harald]

Am 06.02.2018 um 17:24 schrieb Michelle Konzack:
> Good evening,
> 
> Am 2018-02-06 hackte Matus UHLAR - fantomas in die Tasten:
>> Hello,
>>
>> our customer uses a domain that is registered, but hidden
>> (doesn't exist in DNS).
> 
> I hope you know what are you doing, because the DNS MUST exist!
> Please read the general conditions for the EU Domain Registry!
> 
>> The domain is used by multiple organizations and we are required to
>> forward
>> lookups for the domain to foreign internal servers.
> 
> WHY register an .eu Domain at all?
> 
> If it is for internal use, setup your bind9 to serv the TLD .uhlar
> and config all your clients to use your bin9 as there NS.
> 
> I do this with a bunch of TLDs which are only known to me and not a
> singel bot is aware of it...

because the days that you can be sure that tomorrow not some idiot 
registry starts with .uhlar as world-wide available TLD are gone and 
then you have a problem if your need to access a real-world domain in 
that TLD