[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: Add a minimal instance of named early in the boot
On Wed, 12 Aug 2009, Tonnerre LOMBARD wrote:
> On Mon, Aug 10, 2009 at 10:20:46PM +0200, Joerg Sonnenberger wrote:
> > There is another alternative I just remembered. Adding support for
> > liblwres via nsswitch.conf.
> That's not a bad idea; it would have to be verified beforehand though
> that liblwres/lwresd support DNSSEC. I get the impression though that
> the answer will be "yes".
Yes, but I haven't used it. The BIND 9 lightweight resolver library's
lwres_getrrsetbyname(3) offers individual signatures and indication when
the data has been DNSSEC validated and the signatures verified.
Main Index |
Thread Index |