Hanno Böck wrote:
dig baddata-A.test.dnssec-tools.org @localhost
There is no DS record for dnssec-tools.org in .org (chain of trust is broken), so you can't validate the response -- thus the data being passed back to you.
AlanC _______________________________________________ bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users

