> This is slightly incorrect. The DNS server checks it's cache for the
> most specific referral information for the full domain name (in this case
> HOST.DOMAIN.COM). It could have cached NS records for 
> HOST.DOMAIN.COM, DOMAIN.COM, COM or none at all.

Yes, of course. Thanks for the clarification.

> Actually, every nameserver is sent the FQDN.

That's unfortunate. Too bad they don't treat queries against TLD
name servers differently. (i.e. querytype=NS  nonrecursive with
only the domain name). I'd hope the TLD name servers are smart
enough to strip the host and not perform 2 queries for every lookup.

So, Verisign could implement this only by enabling recursion on the
.com/.net servers *and* ignoring the no recursion flag. Infeasibly
high load.

    Adam

Reply via email to