[Cerowrt-devel] [Dnsmasq-discuss] test-ipv6.com vs dnssec

[James Cloos]

>>>>> "TE" == Török Edwin <edwin+ml-cerowrt at etorok.net> writes:

TE> or the NS reply doesn't have all the required info?

Replies to NS requests include DS records iff the requests are sent to
the parent of the zone, even when the requestor sets the DO bit.  That
is to say, when the replies are glue records.

Everything is optimized for root->down verification.

-JimC
--
James Cloos <cloos at jhcloos.com>         OpenPGP: 0x997A9F17ED7DAEA6