DNSSEC Validation not working

Hello! I run a server with Bind9.18 on Alma9. It acts as the nameserver for two domains. (with glue records from the registrar). DNSSEC is enabled but somehow outbound queries are not validated? Domains with dnssec do have the "ad" flag though. The local domains somehow dont have the ad flag. e

Re: DNSSEC Validation not working

Hi Luca, This is correct: dnssec-validation auto; If you use "yes" there, then you must supply a trust anchor. Auto is the default. The only idea I have is this: zone "." IN { type hint; file "named.ca"; }; You don't need this anymore. BIND 9.18 will automatically find the root zones starting