On Sat, 2021-02-27 at 01:33 +0000, Wessels, Duane via dns-operations wrote:
> Additionally, we expect this may bring some new attention to the
> 
> way in which authoritative name servers respond to queries of type
> 
> NSEC.  Some implementations respond with referrals, while others
> 
> respond with an NSEC RR in the Answer section.  Verisign will be
> 
> pleased to work with the community if there are ambiguities in the
> 
> relevant RFCs (e.g. 4035) that would benefit from clarification,
> 
> as current behavior beyond this subset of our name servers suggests.

Earlier, inconclusive, discussion on that: 
https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015114.html 
('DS-side NSEC query')

Kind regards,
-- 
Peter van Dijk
PowerDNS.COM BV - https://www.powerdns.com/
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Reply via email to