Hugo Salgado wrote on 2022-08-16 14:19:
Dear authors. In the second paragraph of section 3 "Upgrading NS RRset Credibility" there is a mention of "Positive responses...", which I am not sure of its exact meaning. Do you mean ANSWERS>0? Or AA=1?
i think if the text were "positive responses" then your question would be a nonsequitur, but the actual text i see is "positive answers" which does indeed raise your questions.
I'm thinking of a (broken) nameserver that responds to NSs queries with NXDOMAIN (but does answer to other types)[1]. Is that a positive response, which should be cached with an authoritative data ranking?
i think we're sending an RD=0 question to a server we think is the closest enclosing delegator for the zone we are revalidating, and that it has to answer AA=0 (because it is a delegated name) with an RRset of type NS, or else it's nonresponsive. i leave it to my coauthors to find a way using only english words to best express that constraint.
thanks. -- P Vixie _______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
