Hello Charles, On 20 Feb 2015, at 20:08 , Charles Sprickman <sp...@bway.net> wrote:
> Sounds good. I’m itching to tell our users they’re a bit “safer”, and I have > about zero interest in learning a third DNS server (unbound). > > The old blog post noted that you’d be leveraging another server for the key > verification, is that still the case or will everything happen within pdns > recursor? For various reasons, yes, it makes sense to do validation in another server/daemon/process. However, you should still expect something that’s as simple as ‘verify-dnssec=yes’ in recursor.conf. We hope :) Kind regards, -- Peter van Dijk Netherlabs Computer Consulting BV - http://www.netherlabs.nl/ _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users