Oct. 15, 2024
3:19 a.m.
terry> That is a correct interpretation of the DO bit. I haven't looked terry> at the APNIC stats, but will do so later ... However if that is terry> the case, one would ask "WHY" are so many resolvers are asking terry> for DNSSEC responses and doing nothing with them? Again, root terry> cause analysis! stub OS resolvers like microsoft have been setting DO bit for decades and the resolvers above them pass that on. doesn't mean they use the signatures, etc.