Submitted by johnp_ on Mon, 04/10/2017 - 02:08
The ISC DNSSEC Look-aside Validation Registry is currently being decommissioned. [1][2]
Unbound already removed it more than a year ago. [3]
I therefore recommend removing it from webmin's BIND module as well.
[1] https://www.isc.org/downloads/bind/dlv/
[2] https://www.isc.org/blogs/dlv/
[3] https://gitlab.labs.nic.cz/jvcelak/unbound/commit/c17574c81aa3f3167909f3...
Status:
Active
Comments
Submitted by johnp_ on Mon, 04/10/2017 - 02:09 Comment #1
Submitted by johnp_ on Mon, 04/10/2017 - 02:10 Comment #2
Submitted by JamieCameron on Mon, 04/10/2017 - 17:47 Comment #3
Does this mean that the
dnssec-lookasideandtrusted-keysdirectives no longer need to be set in the BIND config when enabling DNSSEC validation ?