On Jul 4, 2019, at 3:32 PM, Tom Pusateri <[email protected]> wrote: > I was trying to give the client enough information to determine WHY it > failed. If we determine this isn’t important, we can just let the client try > to figure it out but it will be more work for the client.
The client is a computer program, not a person, so there is no chance that it will be able to figure out what went wrong! :) Seriously, though, what’s the strategy the client should follow in this case? I think we generally say “try again in an hour” but I’m not sure if we said that explicitly here or just in the DSO document. > It’s likely that resolvers aren’t going to support this before authoritative > servers are and clients will quickly learn their resolver isn’t capable and > go directly to the authoritative for some period of time. I think that how resolver support for this will work is an open question right now, which will probably have to be addressed in a follow-on document. At present, the implementation I’ve done doesn’t even attempt the local resolver, because I couldn’t figure out how to implement that. I’m assuming that in most cases there’s no particular benefit to using the local resolver, because the auth server will also be local.
_______________________________________________ Gen-art mailing list [email protected] https://www.ietf.org/mailman/listinfo/gen-art
