I've written DNS servers that generate responses on the fly from a database
where it does application-specific lookups and transformations. It's
surprisingly easy. They don't do DNSSEC yet but I'm planning to take a whack
at that later this year.
This sounds like a new protocol that changes the nature of the DNS.
That's fine, but it certainly does not belong in DANE, and probably not
in DNSOP.
Not at all. The queries and reponses are exactly the same as with any
other DNS operations. Only the internal implementation of the DNS server
is different.
I've been sending dynamically generated responses to queries to
contacts.abuse.net for the better part of a decade with no interop
problems I'm aware of, so it can't be that new or exotic.
Regards,
John Levine, [email protected], Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail.
_______________________________________________
dane mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dane
