2 ms·
In this case: just like they do now. Quad9 sends SERVFAIL instead of a true answer. Resolvers could also just drop the connection. The only thing they can't do
by cedilla 5y ago
In this case: just like they do now. Quad9 sends SERVFAIL instead of a true answer.
Resolvers could also just drop the connection. The only thing they can't do with DNSSEC is falsifying a NXDOMAIN result.