So a cache stub that provides unsigned answers to .local and .onion
queries is just fine. If the client treats that as SERVFAIL or
whatever it does with unverified answers, that's fine too.
SERVFAIL is a temporary error.
NXDOMAIN is a permanent error which is cachable.
SERVFAIL is not "fine".
Hmmn. Keeping in mind that these responses are sent by the cache, could
you explain what "cacheable" means in this context?
Regards,
John Levine, jo...@taugh.com, Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop