> On 26 Oct 2022, at 11:12, PGNet Dev <pgnet....@gmail.com> wrote: > > hi, > >> AWS are returning NXDOMAIN instead of NOERROR for empty non terminals. Do >> you have strict >> qname minimisation turned on? > > yup, i do > > ... > qname-minimization strict; > ... > > only because my i understood my reads of > > BIND to Add QNAME Minimization > https://www.isc.org/blogs/bind-to-add-qname-minimization/ > > & > > QNAME Minimization and Your Privacy > https://www.isc.org/blogs/qname-minimization-and-privacy/ > > to suggest that it's a GoodIdea(tm).
QNAME minimisation is a good idea. It comes in two flavours, relaxed and strict. Relaxed tries to cope with some breakages like NXDOMAIN being returned from ENTs. Strict doesn’t. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
