From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail2.tohojo.dk (mail2.tohojo.dk [IPv6:2a01:4f8:200:3141::101]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by huchra.bufferbloat.net (Postfix) with ESMTPS id 5F9B421F14E for ; Wed, 5 Feb 2014 23:29:08 -0800 (PST) X-Virus-Scanned: amavisd-new at example.com Received: by alrua-x1.borgediget.toke.dk (Postfix, from userid 1000) id 25E4115E16; Thu, 6 Feb 2014 08:29:01 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=toke.dk; s=201310; t=1391671740; bh=iDhyLsJW3bIi7zae5aSuVj2CFXH0W6oh8eUG5uTdvgg=; h=From:To:Cc:Subject:References:Date:In-Reply-To; b=F6IAKBV7kdBUYC6tA1i2F/QMwEJuDmT/7XDSs8cdQmt1awHmUxsdIDVadd7mO59eN 2QPNG9JhnglokDKG89O288rnbviQGSEHATh4JFo/umHJbhvdzebTK68CsE6JQYQXuV psK9fiIXTPwjbiWwRMy2aVzQwF8j07lwl33lRFXk= From: =?utf-8?Q?Toke_H=C3=B8iland-J=C3=B8rgensen?= To: Simon Kelley References: <87a9e6xcae.fsf@alrua-x1.kau.toke.dk> <87ob2lmqny.fsf@toke.dk> <52F29645.6010001@thekelleys.org.uk> <874n4dwcdb.fsf@alrua-x1.kau.toke.dk> <52F2BA80.9010202@thekelleys.org.uk> Date: Thu, 06 Feb 2014 08:28:59 +0100 In-Reply-To: <52F2BA80.9010202@thekelleys.org.uk> (Simon Kelley's message of "Wed, 05 Feb 2014 22:26:08 +0000") Message-ID: <87iossvgw4.fsf@alrua-x1.kau.toke.dk> Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Cc: cerowrt-devel@lists.bufferbloat.net Subject: Re: [Cerowrt-devel] Fwd: [Dnsmasq-discuss] Testers wanted: DNSSEC. X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Feb 2014 07:29:08 -0000 --=-=-= Content-Type: text/plain Simon Kelley writes: > That's straightforward. Dnsmasq gets a query for > 62.75.115.213.in-addr.arpa, sends it upstream, gets an answer which > isn't signed, and determines that it's insecure, then returns the > answer. Right, that's what I thought. So everything is working as it should? :) -Toke --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBCAAGBQJS8zm7AAoJEENeEGz1+utPpRAH/ij0kzh4lfvhm/NgpADo0/t/ AbJpgzo2kDx1S1i0xoMPXRQx50MP6y2Gu07OQX0EADjVaNfJefiIaXSo8ca79hHS oJYOB8BngF0Ok+Hmyimc+vH7MXCi+4UZ8AekVuesuxmZBdTRHSDZLUuzeYLfDTgb az7sHXWlJ/EcEqyyjvK4I2ranTpK8/phfNhkMmF9yLj95qFvEtEQMTxfHB+rp13J Q7mPWKiM7LZtfYolHiT0zXmcTYpTpJIlzS57RzdbZ2t3EDgQOvpTDgwpI2D9f8DO uhiiL3rzGozEguC643H6d0y83iLwGrlxw6bd5IKRNtIGT3LlRHyzp8AQARHIyQg= =RPP6 -----END PGP SIGNATURE----- --=-=-=--