On 11/07/2015 23:04, manning wrote: > the one change i am working on is to obsolete RRsets since they are a > primary cause of DNS originated DDoS in the Internet.
How do you propose to do that without completely breaking DNSSEC ? RRSIGs are calculated over entire RRsets, not RRs. Ray _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop