[dns-operations] Statement: Issues using BIND 9.4 & 9.5 with DLV and certain DNSSEC-signed zones

Florian Weimer fw at deneb.enyo.de
Wed Apr 22 18:11:21 UTC 2009

* Craig Leres:

> Chris Thompson wrote:
>> The announcement of the fixed BIND 9.4/9.5 versions, and the 1 May
>> deadline, was made on 20 March, here [dns-oarc] and on bind-announce/
>> bind-users (but not dlv-announce, apparently). Anyone using BIND
>> lookaside validation against dlv.isc.org *has* to be aware of the issue.
> I hadn't put two and two together until now but I guess the fact
> that I'm still running 9.6.0-P1 is a problem.

I'm not sure---BIND 9 has the bug, but it also knows about NSEC3, so
it should work as far as .gov is concerned.

More information about the dns-operations mailing list