* Tony Finch: >> And why aren't stub resolvers being encouraged to do their own DNSSec >> validation? > > It's very slow if you don't have a cache. Note that most stubs actually have a cache these days, so I don't think this is a major architectural issue. -- Florian Weimer <fweimer@xxxxxx> BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99 _______________________________________________ Ietf mailing list Ietf@xxxxxxxx https://www.ietf.org/mailman/listinfo/ietf