-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 4/24/2015 5:57 PM, Paul Hoffman wrote:
> Greetings again. Based on input from Stéphane and Hugo, I came up > with the following to replace the current two terms. Does this work > for people? > > --Paul Hoffman > > Policy-implementing resolver -- A resolver acting in recursive > mode that changes some of the answers that it returns based on > policy criteria, such as to prevent access to malware sites or > objectionable content. In general, a stub resolver has no idea > whether or not upstream resolvers implement such policy or, if they > do, the exact policy about what changes will be made. In some > cases, the user of the stub resolver has selected the > policy-implementing resolver with the explicit intention of using > it to implement the policies. In other cases, policies are imposed > without the user of the stub resolver being informed. > Sounds really good -- could you provide reference anchor for "policy-implementing resolver", e.g. DNS RPG? That would be super. - - ferg - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B2 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAlU68A0ACgkQKJasdVTchbLJGAEAmrSjh+//seD8YJdzCKhH6rBx SHcaIllwwfcKwzacZ7wBAMa8IwDATe5ouWI71jX+l78me1pgcQOxOkv+1B5ciGCz =I2Bt -----END PGP SIGNATURE----- _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop