Re: F.ROOT-SERVERS.NET moved to Beijing?

[Tony Finch <dot () dotat at>]

Todd Underwood <toddunder () gmail com> wrote:
> sure, but DNSSEC is still basically unused.

If you are running BIND 9.8 there is really no reason not to turn on
DNSSEC validation, then you won't have to worry about anycast routes
leaking from behind the great firewall.

        dnssec-validation auto;
        dnssec-lookaside auto;

Tony.
-- 
f.anthony.n.finch  <dot () dotat at>  http://dotat.at/
Viking, North Utsire: Southerly veering southwesterly 6 to gale 8,
occasionally severe gale 9 at first in northwest Viking. Moderate or rough
becoming very rough or high. Rain then squally showers. Moderate or good,
occasionally poor.