On Wed, Jan 31, 2018 at 10:04:03AM +0000, Ray Bellis wrote:
> On 30/01/2018 18:59, Andrew Sullivan wrote:
>
> > Because of that same section, also, signing the answer should also not
> > be controversial because the answer is static. My preference,
> > however, would be for the root servers to REFUSE to answer such
> > queries.
>
> Won't that cause the resolver to cycle through every root server letter
> hoping for one that doesn't give that answer?
Yes, most likely. I am not fond of that option. Continuing to
return NXDomain is likely the best option for now. The other
alternative is to actually serve the expected data:
localhost. IN A 127.0.0.1
localhost. IN AAAA ::1
but I don't think that'd be better.
--
Viktor.
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop
