On Tue, Nov 14, 2017 at 07:56:00AM +0000, Shane Kerr wrote:
> > And indeed unlike actual errors, there is nothing one could possibly
> > add in the form extended "error" diagnostics when returning a NODATA
> > or NXDomain response, these non-error conditions don't require any
> > additional context to aid problem resolution.
>
> Be careful when you say "nothing ... possibly". ;)
>
> For example, you could have something like:
>
> RCODE: SUCCESS (NODATA)
> Extended code: ERRBLACKLIST
> Explanation: "Client blacklisted for IPv6 queries"
Well, once we're in the "lying with DNS" business, we hardly need
to restrict extended diagnostics to errors, we can equally contemplate
them for policy-based answers that don't reflect the authoritative
zone content... :-8
--
Viktor.
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop