[dns-operations] Best Practices in DNS security

[Paul Vixie]

# Thank you for your comments - very good points - just one clarification: 
# 
# On Thursday 16 March 2006 13:58, Paul Vixie wrote:
# <snip>
# > 2. your recursive service really can't be externally-reachable, no matter
#                                    ^^^^
# > whether you run it in the same server image as your authority service, or
# > not.
# 
# I am assuming you meant "shall not", instead of "can't" ?!?

"must not" is closer to what i meant.  thanks for asking.