On Thu, Sep 18, 2008 at 12:15:10PM -0400, Paul Wouters <paul at xelerance.com> wrote a message of 16 lines which said: > That might be more complicated then it sounds? What do you do for > records that no longer have a trust record which are in cache? Or > records that might become validated/invalidated due to changes in > the trust path? That's indeed a problem with BIND. Reloading it gives strange results when the trust anchors (or DLV configuration) were modified. Restarting cures the problem.