(Hats off ) And some of use Rrsets to do things for their employer that is never best practice, but necessary evils.
Tim >From my high tech gadget > On Jul 12, 2015, at 16:40, Ray Bellis <r...@bellis.me.uk> wrote: > >> On 11/07/2015 23:04, manning wrote: >> the one change i am working on is to obsolete RRsets since they are a >> primary cause of DNS originated DDoS in the Internet. > > How do you propose to do that without completely breaking DNSSEC ? > > RRSIGs are calculated over entire RRsets, not RRs. > > Ray > > _______________________________________________ > DNSOP mailing list > DNSOP@ietf.org > https://www.ietf.org/mailman/listinfo/dnsop _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
