undefined | Better HN

0 pointshsbauauvhabzb2y ago0 comments

You’re also relying on the client validating DNSSec. I have no idea if/how/when this occurs, or if you can choose to ignore it.

0 comments

A nit, but the resolver, not the client, validates DNSSEC. The client/stub resolver trusts its local resolver. That always struck me as weird.

j / k navigate · click thread line to collapse

A nit, but the resolver, not the client, validates DNSSEC. The client/stub resolver trusts its local resolver. That always struck me as weird.

j / k navigate · click thread line to collapse