[Freeipa-devel] [freeipa PR#426][comment] DNSSEC: forwarders validation improvement

[MartinBasti]

  URL: https://github.com/freeipa/freeipa/pull/426
Title: #426: DNSSEC: forwarders validation improvement

MartinBasti commented:
"""
I was thinking about it and I disagree. Checking forwards zone behaves differently than check for global forwarders. The validate `_dnssec_zone_forwarder_step2` is called aginst an IPA DNS server, so there shouln't be that issue as we know how bind is supposed to work.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/426#issuecomment-278326644