Paul Wouters wrote, On 2010. 06. 27. 17:52: >> BTW, what does stub-prime exactly do? I'm afraid, it's not clear to >> me, what does "it performs NS set priming" mean? > > It is used when you want to "override" the real NS set and do the > lookup of > a zone via nameservers that are not in the "official zone". > > For example, to reach the Canadian testbed for DNSSEC, which runs a > signed > shadow tree for the entire .ca zone, you would use: > > stub-zone: > name:"ca." > stub-prime:"no" > stub-addr:192.228.22.190 > stub-addr:192.228.22.189 > > Now instead of using the NS records in the root zone that point to ca. > unbound > will use these two addresses instead. Yes, I understand this. I don't unserstand the difference between stub-prime:"no" and stub-prime:"yes". Thanks, tamas