AW: Problems with (unsigned) forward zones, dnssec-validation auto and validate-except on BIND 9.16 and 9.17

[Petr Špaček]

On 27. 01. 22 16:05, Gehrkens.IT GmbH | Heiko Wundram wrote:
> Hello Tony,
> 
>> The other things that can cause the behaviour you observed are synth-from-
>> dnssec and qname-minimization.
> 
> thanks for the heads up concerning synth-from-dnssec; I thought the default
> was "no", but that seems to have changed somewhere between 9.14 and 9.16...

FTR it was introduced in 9.12.0, later disabled by default in 9.15.6, 
and reenabled by default in 9.17.21.

-- 
Petr Špaček  @  Internet Systems Consortium