Subject: Re: [dnsext] Side effect of DNS control plane changes Re: BNAME, Synthesized CNAME, and DNSSEC

From: Mark Andrews <[email-masked]>
Date: Tue, 04 May 2010 09:53:34 +1000

Setting AD on authoritative answers is a LOCAL POLICY decision.
Accepting AD requires you to understand the LOCAL POLICY of the
server that is sending the response.

There is no security problem here.  You either accept the LOCAL
POLICY or you do your own validation.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: [email-masked]