[dns-operations] Statement: Issues using BIND 9.4 & 9.5 with DLV and certain DNSSEC-signed zones

[Florian Weimer]

* Craig Leres:

> Chris Thompson wrote:
>> The announcement of the fixed BIND 9.4/9.5 versions, and the 1 May
>> deadline, was made on 20 March, here [dns-oarc] and on bind-announce/
>> bind-users (but not dlv-announce, apparently). Anyone using BIND
>> lookaside validation against dlv.isc.org *has* to be aware of the issue.
>
> I hadn't put two and two together until now but I guess the fact
> that I'm still running 9.6.0-P1 is a problem.

I'm not sure---BIND 9 has the bug, but it also knows about NSEC3, so
it should work as far as .gov is concerned.