> On 26 Oct 2022, at 11:12, PGNet Dev <[email protected]> wrote: > > hi, > >> AWS are returning NXDOMAIN instead of NOERROR for empty non terminals. Do >> you have strict >> qname minimisation turned on? > > yup, i do > > ... > qname-minimization strict; > ... > > only because my i understood my reads of > > BIND to Add QNAME Minimization > https://www.isc.org/blogs/bind-to-add-qname-minimization/ > > & > > QNAME Minimization and Your Privacy > https://www.isc.org/blogs/qname-minimization-and-privacy/ > > to suggest that it's a GoodIdea(tm).
QNAME minimisation is a good idea. It comes in two flavours, relaxed and strict. Relaxed tries to cope with some breakages like NXDOMAIN being returned from ENTs. Strict doesn’t. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: [email protected] -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list [email protected] https://lists.isc.org/mailman/listinfo/bind-users
