FreeBSD Security Advisory FreeBSD-SA-15:11.bind

[Mark Felder]

On Tue, Jul 7, 2015, at 18:25, FreeBSD Security Advisories wrote:
> 
> IV.  Workaround
> 
> No workaround is available, but hosts not running named(8) are not
> vulnerable.
> 

Why is no workaround available? Can't you just disable DNSSEC
validation?

dnssec-enable no;
dnssec-validation no;

In fact, don't they have to be explicitly enabled anyway?