On Saturday, February 27, 2016 6:53:04 PM PST Philip Homburg wrote:
> ...
> ANC can have immediate local benefits if it reduces the cost of running a
> resolver or if the performance of the resolver is noticeably better.
> ...


in an attack scenario (random subdomain for example) there would be a 
measurable improvement from ANC. in normal use, you'll get more from 
resimprove's "NXDOMAIN means no children can exist" change than from ANC.

note, i'm in favour of ANC, and i will agree that unlike ipv6 and sav, there's 
a possibility of local benefit. we could argue longer as to whether the 
non-attack benefit is worth the full-time cost of the added complexity. bugs 
per KLOC is probably a universal constant.

-- 
P. Vixie
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to