Can anyone explain what is going on with the domain matt.io? I'm running Unbound 1.4.9 and have it set up to do DNSSEC validation. "dig matt.io" SERVFAIL's, however "dig +cd matt.io" works fine. This domain doesn't have DNSSEC on it though... I also noticed that when I attempt to look up the NS records, all it returns is a CNAME. Is that valid? Is matt.io's DNS configuration broken, or is Unbound broken? -- Mike Cardwell https://grepular.com/ https://twitter.com/mickeyc Professional http://cardwellit.com/ http://linkedin.com/in/mikecardwell PGP.mit.edu 0018461F/35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 598 bytes Desc: OpenPGP digital signature URL: <http://unbound.nlnetlabs.nl/pipermail/unbound-users/attachments/20111216/6fe2b5da/attachment.pgp>