Maintained by: NLnet Labs

[Unbound-users] DLV anchor and unsigned domains

Alan Jurcic
Fri Mar 28 11:16:19 CET 2014


On 28.03.14 at 11:01, W.C.A. Wijngaards wrote:
> 
> You log stops just when it gets interesting - what it does with the
> NSEC3 response to a DLV lookup for your DLV repository.  But anyway, I
> can see why it fails.  Unbound only supports DLV with NSEC, so that it
> can do aggressive negative caching with that.  It has not implemented
> the mandatory aggressive negative DLV caching for NSEC3.  You should
> change your private dlv repository and sign it with NSEC.
> 

OK, I'm glad it's not a bug :)

Thanks for helping out.

Alan