Re: DNSSEC server failure with trstech.net
On Thu, Nov 06, 2008 at 02:15:59PM +0100,
Gilles Massen <gilles.massen@restena.lu> wrote
a message of 38 lines which said:
[color=blue]
> That seems to be the issue: trstech.net has an DLV entry.[/color]
Right! I completely missed it. Thanks.
[color=blue]
> It kind of illustrates that once you've gone the dnssec path, it
> hard to go back again...[/color]
It illustrates also that DNSSEC is a very good way of DoSing yourself.
Probably, Unbound had no problem because it was not configured to use
DLV.