i have almost out-of-the-box windows 2003 server which is also domain name server for some users. should i be worried of 5th of may's deployment of dnssec on root name servers ?
i have already run:
dnscmd /Config /EnableEDnsProbes 1
thanks a lot!
ps. my firewalls / network infrastructure do not block udp packets > 512B
my result from ripe test:
Announced buffer size: 1280 bytes
Measured buffer size: 1259 bytes
EDNS enabled: yes
DNSSEC enabled: no
Your resolver does not have DNSSEC enabled.
Note: There will always be a difference between the announced and measured buffer size because of the algorithm used. However this difference should not exceed 300 bytes.
this is active directory server so it has dns service which is authoritative dns server for some internal dns zone [not used in public internet]. this server is also used as recursive name server for some internal users.