From: marka@isc.org
MIME-Version: 1.0
Date: Mon, 30 Oct 2017 14:28:45 -1000
Subject: check that named can validate through a forwarder which has a bad
 trust anchor
X-Mailer: MIME-tools 5.508 (Entity 5.508)
Content-Type: text/plain; charset="utf-8"
To: bind9-public@isc.org
Content-Transfer-Encoding: binary
X-RT-Interface: Web
Message-ID: <rt-4.4.1-31452-1509409725-575.0-0-0@isc.org>
Content-Disposition: inline
X-RT-Original-Encoding: utf-8
Content-Length: 258

Named should be able to validate through a forwarder that has a bad trust
anchor.  This is scenario likely to happen when the old TA for the root zone
is remove.

The forwarder should be returning SERVFAIL to CD=0 queries.  We should
retry with CD=1 queries.