I have given it anothre read through and it looks good. Maybe section 7 should be titled "No changes to RFC 1035" ?
Maybe make it a bit more clear that my implementation successfully mitigated the attack? :-) Would it be worth adding a section on responding to RRSIG queries? (Cloudflare REFUSEs; BIND 9.11 will minimize similar to ANY) Tony. -- f.anthony.n.finch <[email protected]> http://dotat.at/ - I xn--zr8h punycode Viking, North Utsire, South Utsire, Northeast Forties: Westerly or southwesterly 4 or 5, becoming cyclonic 5 to 7 later. Slight or moderate. Showers, rain later. Good, becoming moderate or poor later. _______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
