[145273] in North American Network Operators' Group
Re: F.ROOT-SERVERS.NET moved to Beijing?
daemon@ATHENA.MIT.EDU (Tony Finch)
Mon Oct 3 07:32:08 2011
Date: Mon, 3 Oct 2011 12:29:48 +0100
From: Tony Finch <dot@dotat.at>
To: Todd Underwood <toddunder@gmail.com>
In-Reply-To: <CAB2RJygitNhd8+xy=giKNMCFgUPfez0q3x94Dx1NjoX5-rGrkA@mail.gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Todd Underwood <toddunder@gmail.com> wrote:
>
> sure, but DNSSEC is still basically unused.
If you are running BIND 9.8 there is really no reason not to turn on
DNSSEC validation, then you won't have to worry about anycast routes
leaking from behind the great firewall.
dnssec-validation auto;
dnssec-lookaside auto;
Tony.
--
f.anthony.n.finch <dot@dotat.at> http://dotat.at/
Viking, North Utsire: Southerly veering southwesterly 6 to gale 8,
occasionally severe gale 9 at first in northwest Viking. Moderate or rough
becoming very rough or high. Rain then squally showers. Moderate or good,
occasionally poor.
