[dns-operations] google DNS doing validation?

Paul Wouters paul at cypherpunks.ca
Mon Jan 28 18:16:17 UTC 2013


On Mon, 28 Jan 2013, Robert Edmonds wrote:

> Paul Wouters wrote:
>> On Mon, 28 Jan 2013, Robert Edmonds wrote:
>>
>>> can 8.8.8.8 be used behind a validating forwarder now?  the last time i
>>> tried that it didn't work (i think there was some difficulty with
>>> locating DS records), but that was a while ago.
>>
>> That was fixed about a year ago....
>
> about a year ago was when i last tested it, and there were problems
> locating DS records (specifically, DS records in TLDs, iirc).

Yes. they fixed that. It was a little confusing because some of the DS
records worked, but it was narrowed down to situations where the parent
and child were hosted on the same name servers, like cz. and nic.cz.

so it just behaved without having the special knowledge that the DS
record lives at the parent.

Paul



More information about the dns-operations mailing list