[Cerowrt-devel] [Dnsmasq-discuss] test-ipv6.com vs dnssec

James Cloos cloos at jhcloos.com
Wed Apr 30 17:44:46 EDT 2014

>>>>> "TE" == Török Edwin <edwin+ml-cerowrt at etorok.net> writes:

TE> or the NS reply doesn't have all the required info?

Replies to NS requests include DS records iff the requests are sent to
the parent of the zone, even when the requestor sets the DO bit.  That
is to say, when the replies are glue records.

Everything is optimized for root->down verification.

James Cloos <cloos at jhcloos.com>         OpenPGP: 0x997A9F17ED7DAEA6

More information about the Cerowrt-devel mailing list