postbank.de / dslbank.de and DNSSEC and DANE

[Tony Finch]

A. Schulze via Unbound-users <unbound-users at unbound.net> wrote:

> But other people report they get NXDOMAIN and not SERVFAIL like I do.
> (https://mail.sys4.de/mailman/private/dane-users/2016-February/thread.html)
>
> So I like to ask if unbound may behave different then bind.

Yes, dig _25._tcp.mailrelay2.bonn.postbank.de. tlsa works for me with
BIND. However dig +dnssec *.postbank.de. fails, so as you say, all is not
well.

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Hebrides, Bailey: Westerly 7 to severe gale 9 at first in south, otherwise
cyclonic becoming northerly 5 to 7. Very high, becoming very rough or high.
Rain, then wintry showers. Moderate, occasionally poor.