Re: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-12-06 Thread Warren Kumari
On Thu, Nov 17, 2016 at 5:36 AM, Ralph Dolmans wrote: > Hi, > > Maybe I'm missing something, but it is not clear to me whether this > document (-06) allows generation of NODATA answers using matching NSEC > records that do not have the QTYPE set in the type bitmap. > > I don't see it explicitly me

Re: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-11-25 Thread Tim Wicinski
On 11/25/16 3:59 PM, Warren Kumari wrote: Thank you VERY much - I really appreciate the help. I merged all the changes, other than those in a17e0f1 (remove redundant quotes from rfc4035 and recommendation updates) -- this is because the RFC Editor really wants an "Updates to RFC" section.

Re: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-11-25 Thread Warren Kumari
On Tue, Nov 22, 2016 at 8:29 AM, Matthijs Mekking wrote: > Hi, > > This document looks almost good to me. I have some nit comments. > > - Page 3, Section 1, says a DNS negative cache is used to cache the fact > that a name does not exist. But it also caches if the name is valid but > there are no

Re: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-11-22 Thread 神明達哉
At Thu, 17 Nov 2016 11:36:04 +0100, Ralph Dolmans wrote: > Maybe I'm missing something, but it is not clear to me whether this > document (-06) allows generation of NODATA answers using matching NSEC > records that do not have the QTYPE set in the type bitmap. > > I don't see it explicitly mentio

Re: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-11-22 Thread Matthijs Mekking
Hi, This document looks almost good to me. I have some nit comments. - Page 3, Section 1, says a DNS negative cache is used to cache the fact that a name does not exist. But it also caches if the name is valid but there are no records for the type. Perhaps: "..., and is used to cache the fact th

Re: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-11-17 Thread Warren Kumari
ould be happy to review next revision. In case I am silent bug me >> until >> I do the review. >> >> Cheers, >> -- >> Ondřej Surý -- Technical Fellow >> >> CZ.NIC, z.s.p.o.-- Laboratoře CZ.NIC >>

Re: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-11-17 Thread Warren Kumari
se work for you, and I'll push a new version once I've incorporated more comments. W > > Cheers, > -- > Ondřej Surý -- Technical Fellow > > CZ.NIC, z.s.p.o.-- Laboratoře CZ.NIC > Milesovska 5, 130 00 Praha 3, Czech Repub

Re: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-11-17 Thread Ralph Dolmans
Hi, Maybe I'm missing something, but it is not clear to me whether this document (-06) allows generation of NODATA answers using matching NSEC records that do not have the QTYPE set in the type bitmap. I don't see it explicitly mentioned. The RFC4035 update in section 7 seems to allow it (or at l

Re: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-11-16 Thread Paul Wouters
> On Nov 16, 2016, at 15:09, Ondřej Surý wrote: > > Hi, > > I read the document and I believe that the document goes to far > to recommend the vendors how to implement the knobs in their > software here: > > It is recommended that resolvers that implement Aggressive Negative > Caching prov

Re: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-11-16 Thread Matthijs Mekking
-dra...@ietf.org To: i-d-annou...@ietf.org Cc: "dnsop" Sent: Wednesday, 16 November, 2016 03:41:29 Subject: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the D

Re: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-11-15 Thread George Michaelson
130 00 Praha 3, Czech Republic > mailto:ondrej.s...@nic.czhttps://nic.cz/ > ------------ > > - Original Message - >> From: internet-dra...@ietf.org >> To: i-d-annou...@ietf.org >> Cc: "dnsop" >&g

Re: [DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-11-15 Thread Ondřej Surý
mailto:ondrej.s...@nic.czhttps://nic.cz/ - Original Message - > From: internet-dra...@ietf.org > To: i-d-annou...@ietf.org > Cc: "dnsop" > Sent: Wednesday, 16 November, 2016 03:41:29 > Subject: [DNSOP] I-D Action:

[DNSOP] I-D Action: draft-ietf-dnsop-nsec-aggressiveuse-06.txt

2016-11-15 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Domain Name System Operations of the IETF. Title : Aggressive use of NSEC/NSEC3 Authors : Kazunori Fujiwara Akira Kato