Validation failure signature crypto failed

Casey Deccio casey at deccio.net
Wed Jan 25 19:19:21 UTC 2017


> On Jan 25, 2017, at 3:35 AM, Jac Backus via Unbound-users <unbound-users at unbound.net> wrote:
> 
> Why does dnsviz not show the TXT record without selecting it in Advanced?

It was simply a choice of efficiency.  By default queries for MX, TXT, NS, and SOA are only issued if the name is a zone apex because it is more common to see those records at a zone apex.  It would be a bit slower and require more storage to keep track of the less common case.  The option of specifying TXT (and others) allows some flexibility beyond the defaults.

Casey


More information about the Unbound-users mailing list