I have given it anothre read through and it looks good. Maybe section 7 should be titled "No changes to RFC 1035" ?
Maybe make it a bit more clear that my implementation successfully mitigated the attack? :-) Would it be worth adding a section on responding to RRSIG queries? (Cloudflare REFUSEs; BIND 9.11 will minimize similar to ANY) Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ - I xn--zr8h punycode Viking, North Utsire, South Utsire, Northeast Forties: Westerly or southwesterly 4 or 5, becoming cyclonic 5 to 7 later. Slight or moderate. Showers, rain later. Good, becoming moderate or poor later. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
