Value of a DNSSEC validating resolver

[G.W. Haywood]

Hi there,

On Sat, 2 Dec 2023, Mark Andrews wrote:
> On Fri, 1 Dec 2023, John Thurston wrote:
> 
> > Can someone make a good case to me for continuing to perform DNSSEC
> > validation on my central resolvers?
> 
> Think of a recursive server as a town water treatment plant. You
> could filter and treat at every house and sometimes you still do
> like boiling water for baby formula but on the most part what you
> get out of it is good enough for consumption as is.

Thank you for that outstandlingly useful analogy, I hope to use it!

-- 

73,
Ged.