On Saturday, 12 April 2014 1:35 AM, Miloslav Trmač <mitr(a)volny.cz> wrote:
The goal is to have DNSSEC validation in a system-wide, dedicated
trusted for that purpose; i.e. unbound does DNSSEC validation for
every application, with a centralized configuration and cache,
so no application needs or should do this on its own; it can simply
consult the AD bit in the reply.
Not necessarily, and probably not. ...
Thanks so much for the precise responses Miloslav. But, am I the only one to not see
Dan's earlier mail? Or was it a different thread??