[dns-operations] [ISC Security Advisory] BIND 9 Resolver crashes after logging an error in query.c

[Paul Wouters]

On Wed, 16 Nov 2011, David Conrad wrote:

> Is it even possible to disable DNSSEC without recompilation?

options {
        dnssec-enable yes;
         dnssec-validation no;
};

If on a mix auth/recursor server, you should leave dnssec-enable yes if serving
signed zones, otherwise you can set that to no as well.

Paul