-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 4/24/2015 5:57 PM, Paul Hoffman wrote:

> Greetings again. Based on input from Stéphane and Hugo, I came up
> with the following to replace the current two terms. Does this work
> for people?
> 
> --Paul Hoffman
> 
> Policy-implementing resolver -- A resolver acting in recursive
> mode that changes some of the answers that it returns based on
> policy criteria, such as to prevent access to malware sites or
> objectionable content.  In general, a stub resolver has no idea
> whether or not upstream resolvers implement such policy or, if they
> do, the exact policy about what changes will be made.  In some
> cases, the user of the stub resolver has selected the
> policy-implementing resolver with the explicit intention of using
> it to implement the policies.  In other cases, policies are imposed
> without the user of the stub resolver being informed.
> 

Sounds really good -- could you provide reference anchor for
"policy-implementing resolver", e.g. DNS RPG? That would be super.

- - ferg



- -- 
Paul Ferguson
PGP Public Key ID: 0x54DC85B2
Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B2

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iF4EAREIAAYFAlU68A0ACgkQKJasdVTchbLJGAEAmrSjh+//seD8YJdzCKhH6rBx
SHcaIllwwfcKwzacZ7wBAMa8IwDATe5ouWI71jX+l78me1pgcQOxOkv+1B5ciGCz
=I2Bt
-----END PGP SIGNATURE-----

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to