F.ROOT-SERVERS.NET moved to Beijing?

Tony Finch dot at dotat.at
Mon Oct 3 06:29:48 CDT 2011


Todd Underwood <toddunder at gmail.com> wrote:
>
> sure, but DNSSEC is still basically unused.

If you are running BIND 9.8 there is really no reason not to turn on
DNSSEC validation, then you won't have to worry about anycast routes
leaking from behind the great firewall.

	dnssec-validation auto;
	dnssec-lookaside auto;

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
Viking, North Utsire: Southerly veering southwesterly 6 to gale 8,
occasionally severe gale 9 at first in northwest Viking. Moderate or rough
becoming very rough or high. Rain then squally showers. Moderate or good,
occasionally poor.



More information about the NANOG mailing list