Mark Andrews wrote:
...
The problem is that you can’t just remove the NS records from the
parent side because name servers learn the NS records from the child
side of the delegation as well as the parent side. The offending NS
records need to be removed from both sides. This (or fixing whatever
is broken) is what should be happening when faults are reported.
When that doesn’t happen in a *reasonable* amount of time the
*entire* delegation needs to be removed to force the issue.
+1. it's a cooperative ecosystem. destructive noncooperation can't be
ignored.
--
P Vixie
_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop
