DNSSEC Validation and Deployment Planning for ISPs
When a signed domain has a broken chain of trust, a validating resolver returns SERVFAIL. ISP operators need enough resolver data to tell that failure from an ordinary DNS outage.
When a signed domain has a broken chain of trust, a validating resolver returns SERVFAIL. ISP operators need enough resolver data to tell that failure from an ordinary DNS outage.