On Fri, 24 Jul 2026, Mark Andrews wrote:
You don’t have to implement DELEG to validate DELEG records.
Sure, but how does that make a DS2 record useful? It needs a resolver that
understands more than NS and DS. Why would you do that and not also do
DELEG?
So, the question is: do we want delext to make it possible to define
new parent-side types that work with NS?
I'm having no luck coming up with a plausible use case. Any DS2 type will be
newer than DELEG, so any resolver that understands DS2 will presumably also
understand DELEG.
I'm trying to imagine a reason you'd take a pre-DELEG resolver and hack DS2
support into it rather adding it to your current DELEG-aware resolver. But
my imagination isn't that good.
_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]
