i have almost out-of-the-box windows 2003 server which is also domain name server for some users. should i be worried of 5th of may's deployment of dnssec on root name servers ?
i have already run:
dnscmd /Config /EnableEDnsProbes 1
thanks a lot!
ps. my firewalls / network infrastructure do not block udp packets > 512B
my result from ripe test:
Announced buffer size: 1280 bytes
Measured buffer size: 1259 bytes
EDNS enabled: yes
DNSSEC enabled: no
Your resolver does not have DNSSEC enabled.
Note: There will always be a difference between the announced and measured buffer size because of the algorithm used. However this difference should not exceed 300 bytes.
ps #2
this is active directory server so it has dns service which is authoritative dns server for some internal dns zone [not used in public internet]. this server is also used as recursive name server for some internal users.