On 13/12/14 09:24, Antonio Prado wrote:

> why pri.authdns.ripe.net should allow AXFR ripe.net zone?
> just asking

Hi Antonio,

The ripe.net zone has always been open for AXFR. There is little point
in blocking AXFR, because the zone is signed with NSEC, and can be
easily enumerated.

Regards,

Anand Buddhdev
RIPE NCC

Reply via email to