On Sun, Jan 25, 2015 at 12:15:53PM -0800, Paul Vixie wrote:
> queries would all be answered with NXDOMAIN). my question is: why do
> this, rather than passing a law ("adopting an RFC") that reserves these
> names within the IANA system, such that the NXDOMAIN source can reliably
> be the IANA root name servers?Indeed, if something like the draft in question were to be published as an RFC (and as I've already argued, I think the names in there ought to be treated independently, but people of good will can disagree), the reservation would be exactly that result. The proposal to use a widespread configuration of RPZ to chip away at the legitimate answers from root name servers strikes me as a rather dangerous arrogation of control over the root zone and contrary to the observations in RFC 2826. Best regards, A -- Andrew Sullivan [email protected] _______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
