Notes tagged dnssec — ymrtech.com

Signing a zone your own resolvers answer converts a soft failure into a hard one: a resolver returns SERVFAIL, and the name dies everywhere at once.