<html><head>
<meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type">
</head><body bgcolor="#FFFFFF" text="#000000"><br>
<br>
<blockquote style="border: 0px none;"
cite="mid:20141025161530.GA851@laperouse.bortzmeyer.org" type="cite">
<div style="margin:30px 25px 10px 25px;" class="__pbConvHr"><div
style="display:table;width:100%;border-top:1px solid
#EDEEF0;padding-top:5px"> <div
style="display:table-cell;vertical-align:middle;padding-right:6px;"><img
photoaddress="bortzmeyer@nic.fr" photoname="Stephane Bortzmeyer"
src="cid:part1.02030207.04080504@redbarn.org"
name="compose-unknown-contact.jpg" height="25px" width="25px"></div> <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;width:100%">
<a moz-do-not-send="true" href="mailto:bortzmeyer@nic.fr"
style="color:#737F92
!important;padding-right:6px;font-weight:bold;text-decoration:none
!important;">Stephane Bortzmeyer</a></div> <div
style="display:table-cell;white-space:nowrap;vertical-align:middle;">
<font color="#9FA2A5"><span style="padding-left:6px">Saturday, October
25, 2014 9:15 AM</span></font></div></div></div>
<div style="color:#888888;margin-left:24px;margin-right:24px;"
__pbrmquotes="true" class="__pbConvBody"><div>On Thu, Oct 23, 2014 at
10:36:37AM -0700,<br> Paul Vixie <a class="moz-txt-link-rfc2396E" href="mailto:paul@redbarn.org"><paul@redbarn.org></a> wrote <br></div><div><!----><br>I
run Unbound on my laptop for many years, using ::1 as the only<br>resolver.
It works on most normal networks. As usual, hotel and<br>airport
networks are awful, necessiting a fallback. The best solution<br>is to
automatize the fallback with the excellent dnssec-trigger<br><a class="moz-txt-link-rfc2396E" href="http://www.nlnetlabs.nl/projects/dnssec-trigger/"><http://www.nlnetlabs.nl/projects/dnssec-trigger/></a>.<br><br></div></div>
</blockquote>
i believe that this fallback scheme is the only way you, or drc, or
florian, is able to get useful work done in this configuration. when i
ran suse linux on my laptop, dhcp-client's nameservers went into an
"include file" for BIND9, in a configuration that said "forward last;".<br>
<br>
i do not believe that we could recommend end-user RDNS without that, or
that we should ever do so with that.<br>
<br>
<div class="moz-signature">-- <br>Paul Vixie<br>
</div>
</body></html>