Re: [nznog] Validating resolvers for DNS and DNSSEC

Straight after the conference, I enabled validation on a resolver that handles in excess of 2 million queries/day. So far I have no negative impact to report either :) I support Andy & Dean's comments. Just turn it on already! Pete Mundy Wearer of Many Hats On 11/02/2014, at 12:20 PM, Dean Pemberton wrote:

Dave Mill (Inspire) stood up at NZNOG and clearly said that for them that never happened.

Just turn it on.

On Tue, Feb 11, 2014 at 11:51 AM, Nathan Ward wrote:

...

[SNIP] I've been talking about this with one of my customers recently, and there's a concern by some that turning on validation will trip false positives - which for an ISP is a bad thing to do - all the customer sees is that you 'don't work' while the other ISP does.

Is there public data available re. this? Does it likely vary much for NZ? [SNIP] Nathan Ward