[dns-operations] All dual-stack DNS servers - any problem with it?

Paul Vixie paul at vix.com
Fri May 18 12:02:32 UTC 2007


> > dnssec requires edns.
> 
> There are several setups out there limiting any EDNS query to 512 bytes.

then those setups will preclude the use of dnssec.

this isn't negotiable.  anyone who breaks edns will break dnssec.  anyone
stuck in a place where edns doesn't work will have to tunnel dns over vpn.



More information about the dns-operations mailing list