[Pdns-users] Recursor 5.4.0: RPZ matches on '.' root query, breaks DNSSEC validation (Indeterminate instead of Bogus)

[Brian Candler]

On 20/04/2026 10:58, Otto Moerbeek via Pdns-users wrote:
> which could lead to unexpected matches as well.  I have to think if it
> is possible to skip those as well, though this is dangerous territory,
> as afaik we have no defined way to distinguish actual custom records
> from these kind of "meta" records.

An option to skip everything at the RPZ apex?