[Cerowrt-devel] Fwd: [Dnsmasq-discuss] Testers wanted: DNSSEC.

[Simon Kelley]

On 09/02/14 18:04, Dave Taht wrote:
> Got the right time?

See my previous reply: the signature inception time for .dk I'm seeing 
is quite recent, so there's not much slack to play with.

>
> I have no idea how to deal with the time headache still, besides adding
> an un-validating-resolver to ntpdate, and sanity checks in dnsmasq  like
> (if system time is<  my build time, don't do dnssec) - but the latter
> is imperfect.
>
> http://www.bufferbloat.net/issues/113
>


Cheers,

Simon.