On Tue, Mar 10, 2015 at 7:37 AM, W.C.A. Wijngaards <wou...@nlnetlabs.nl>
wrote:

>
> Unbound varies its answers depending on what the authority server is
> doing.  If the authority server inserts such an A or AAAA record in
> the additional section, unbound has code for this case (an AAAA
> inserted for an A query, or an A inserted for an AAAA query).
>

Ah, that's good to know. The code for this case is "insertion into the
resolver's cache" I presume.

What about the side facing the clients? Will unbound insert the gratuitous
A/AAAA in responses to them if they exist in cache? Quick tests I did
suggest not (yet).


> Only for the name that is queried, this to stop poisoning, and this is
> why the code is there (it is a (happy?) side-effect of anti-poison code).
>
>
Yup, that makes perfect sense. Thanks for the details Wouter!

Shumon Huque.
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to