Hi Med, > On 23. 9. 2026, at 10:47, [email protected] wrote: > > So, if we have to make a change, the following minimal one (but still > technical) would be more accurate IMO: > > NEW: > Catalog zones reveal the zones served by their consumers, including > their properties. To prevent unintentional exposure of catalog zone > contents, it is RECOMMENDED to limit the systems able to query them > and to conduct catalog zone transfers confidentially (e.g., [RFC9103]).
I am unsure that this actually helps the implementors to do the right thing. If anyone implementing the catalog zones does not know about all the secure transports in DNS then they would not know about DoH or DoQ, so the added 'e.g.' does not provide much guidance to them and if they already know they will do the right thing. This feels like a change for a sake of change... Ondrej -- Ondřej Surý (He/Him) [email protected] A gentle nudge is always appreciated if I take a little longer to reply. _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
