[Discuss] DNSSEC

Edward Ned Harvey (blu) blu at nedharvey.com
Sun Dec 7 11:12:10 EST 2014


In short, the question is:

What is the behavior of an old dns caching server, when it receives a client query for record types that it is too old to understand?  Is it able to dumbly relay that query upstream, and dumbly relay the response back?

The answer to this question essentially determines whether or not DNSSEC is broken.



More information about the Discuss mailing list