[dns-operations] DNSSEC impact on applications was Re: security-aware stub resolver

[Lutz Donnerhacke]

* Edward Lewis wrote:
> A SERVFAIL return from bad DNSSEC

This behavior is not longer default for i.e. bind. Now only the AD bit will
not be set if validation fails.