It appears that Roy Arends <[email protected]> said: >-=-=-=-=-=- > > > >> On 29 Jul 2026, at 12:56, Philip Homburg <[email protected]> wrote: >The DE flag really was introduced as a capability negotiation mechanism. >Later, it turned out that sending both NS >and DELEG in the referral didn’t actually cause interoperability problems (I >believe Shumon and I were the ones who >tested this).
In the other direction, if you have a delegation point with only DELEG, and you sent a response to an old non-aware resolver with an authority section that has DELEG and maybe DS and maybe some RRSIGs, will resolvers ignore the useless (to them) stuff and treat it as NODATA, or barf because the authority section has garbage? I have no idea, perhaps people have tried it out. If the answer is NODATA the case for the DE bit is a lot weaker. R's, John _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
