Am 22.03.2022 um 18:07 schrieb lejeczek via FreeIPA-users <freeipa-users@lists.fedorahosted.org>:

p.s. is the world ready for such hardened IPA/dns? I mean.. if paypal.com cannot keep up..


In a production-setup, I would not rely on IPA-DNS for my general resolver-tasks.

I’d just forward it the necessary queries and let the actual resolvers do their work.