tech-userlevel archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Add a minimal instance of named early in the boot

On Wed, 12 Aug 2009, Tonnerre LOMBARD wrote:

> On Mon, Aug 10, 2009 at 10:20:46PM +0200, Joerg Sonnenberger wrote:
> > There is another alternative I just remembered. Adding support for
> > liblwres via nsswitch.conf.
> That's not a bad idea; it would have to be verified beforehand though
> that liblwres/lwresd support DNSSEC. I get the impression though that
> the answer will be "yes".

Yes, but I haven't used it. The BIND 9 lightweight resolver library's 
lwres_getrrsetbyname(3) offers individual signatures and indication when 
the data has been DNSSEC validated and the signatures verified.


Home | Main Index | Thread Index | Old Index