On Tue, 20 Dec 2016, Stephane Bortzmeyer wrote:
One of my comments was not addressed. I would like, in section 10, see
some details about what exactly is implemented by Unbound and Google
Public DNS:
* synthesis of NXDOMAIN from NSEC (obviously; that's the minimum)
* synthesis of NXDOMAIN from NSEC3 (if no opt-out)
* synthesis of NODATA from NSEC/NSEC3
* synthesis of positive answers from wilcards+NSEC
* all of them?
Do you mean this in the context of RFC 6982?
No, RFC 7942.
Or do you believe this needs to go into the RFC?
Certainly not.
Ok, we are talking about the same and are in agreement :)
Paul
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
