[dns-operations] Validating or not validating (ICANN controlled interruption)

[Tony Finch]

Stephane Bortzmeyer <bortzmeyer at nic.fr> wrote:
>  Ralf Weber <dns at fl1ger.de> wrote:
>
> > > In some cases (difficult to pinpoint, depending on the resolver's
> > > state), both BIND and Unbound return SERVFAIL.
> > Could you be more specific.

> version.bind.		0 CH TXT "9.8.0-P4.jp"

The BIND CHANGES file includes the following, which first appeared on the
9.8 branch in version 9.8.2.

3175.   [bug]           Fix how DNSSEC positive wildcard responses from a
                        NSEC3 signed zone are validated.  Stop sending a
                        unnecessary NSEC3 record when generating such
                        responses. [RT #26200]

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Trafalgar: Cyclonic in northwest, otherwise mainly northerly or northwesterly
5 or 6. Slight or moderate. Showers in northwest. Good.