It should be fine with modern caches. The way caches are meant to work according to the DNSSEC standard is that the complete response is cached as single atomic entry, complete with any asociated SOA/NSEC records.
Tnx.
This is not yet part of the standard though, and in fact old authoritative nameservers sometimes return NXDOMAIN even when there are children, so in practice it ths will probably have to be restricted to DNSSEC.
Oh, I know. I'm trying to figure out how to fix rbldnsd. R's, John _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
