On Tue, Mar 15, 2016 at 11:39:03AM +0000,
 Ted Lemon <ted.le...@nominum.com> wrote 
 a message of 14 lines which said:

> This sounds like a really good rejoinder until you realize that we
> are talking about an optimization that is likely to produce very
> little actual benefit in practice

Side question: why did you not raise the point during the discussions
of draft-fujiwara-dnsop-nsec-aggressiveuse or
draft-wkumari-dnsop-cheese-shop? If this optimisation is useless, we
could drop these drafts as well.

> other than in the presence of certain kinds of PRSD attacks.

By the way, I assume "PRSD attacks" are "random QNAME attacks" but I
don't find a lot of occurrences for this term.

And, no, the problem is not just the random QNAME attacks but, also,
like for the two drafts mentioned above, a better efficiency of the
global DNS (the case of the junk traffic at the root being of course
the most obvious: I assume this is why PowerDNS has a "NXDOMAIN cut"
option just for the root).

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to