[Pdns-users] Any status on DNSSEC in Recursor?

[Peter van Dijk]

Hello Charles,

On 20 Feb 2015, at 20:08 , Charles Sprickman <spork at bway.net> wrote:

> Sounds good.  I’m itching to tell our users they’re a bit “safer”, and I have about zero interest in learning a third DNS server (unbound).
> 
> The old blog post noted that you’d be leveraging another server for the key verification, is that still the case or will everything happen within pdns recursor?

For various reasons, yes, it makes sense to do validation in another server/daemon/process. However, you should still expect something that’s as simple as ‘verify-dnssec=yes’ in recursor.conf. We hope :)

Kind regards,
-- 
Peter van Dijk
Netherlabs Computer Consulting BV - http://www.netherlabs.nl/