> Mark Andrews <mailto:ma...@isc.org>
> Tuesday, January 27, 2015 4:10 PM
>
>> ...
>
> Actually there is value:
> ...
> * with cookies same zone data is perfectly fine even if not signed.

if by this you mean "in bailiwick for the referral, or matching the
QNAME", then i agree.

i used to think "or a sibling of an authoritative answer" but kaminsky
showed us that the sibling might be a different zone cut.

-- 
Paul Vixie
_______________________________________________
dns-operations mailing list
dns-operations@lists.dns-oarc.net
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

Reply via email to