On 22. 07. 25 18:26, Wessels, Duane wrote:


On Jul 22, 2025, at 6:11 PM, Petr Špaček <[email protected]> wrote:

Hi all.

I wonder how to interpret '. DS'/'. DELEG' queries and welcome opinions!
...
With strict interpretation of 'DS lives at parent' I would argue '. DS' should 
result in SERVFAIL: No parent for . can be contacted.
...
Needless to say implementations vary in their responses.

You’re asking for clarity on what a recursive resolver should return in this 
case, and not what an authoritative server should return for an $ORIGIN/DS 
query, right?

Yes please. I don't see ambiguity in definition for auths. Resolvers and validators are giving me trouble.

--
Petr Špaček

_______________________________________________
DNSOP mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to