From: Ondřej Surý <ondrej@isc.org>
Date: Mon, 20 Jul 2026 10:50:09 +0000 (+0200)
Subject: new: usr: Disclose active Negative Trust Anchors with Extended DNS Error 33
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8dae0a8cda5736dfb533456fe1dd6dc94a913127;p=thirdparty%2Fbind9.git

new: usr: Disclose active Negative Trust Anchors with Extended DNS Error 33

A Negative Trust Anchor (RFC 7646) turns off DNSSEC validation for a domain,
so a name that would normally fail validation resolves instead. named now
marks such answers with Extended DNS Error code 33, "Negative Trust Anchor",
so operators can see at a glance when a response came back only because
an NTA was in effect.

Closes #6268

Merge branch '6268-implement-nta-ede' into 'main'

See merge request isc-projects/bind9!12424
---

8dae0a8cda5736dfb533456fe1dd6dc94a913127