On 11/07/2015 23:04, manning wrote:
> the one change i am working on is to obsolete RRsets since they are a
> primary cause of DNS originated DDoS in the Internet.

How do you propose to do that without completely breaking DNSSEC ?

RRSIGs are calculated over entire RRsets, not RRs.

Ray

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to