I enabled trace with sudo rec_control trace-regex "app\.$" and did lookup "dig app ns @localhost".
What I understand from the trace output is that the recursor has the the NS records in the cache but then it gets the DNSSEC Keys from the NS servers and validates the records. -- Regards Jahanzeb Arshad VP Operations
_______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users
