On Wed, Feb 01, 2017 at 06:46:50PM -0500, Warren Kumari wrote: > Yup, but if a resolver has a (empty) local zone for .alt, and someone > queries it and validates, then I think you get SERVFAIL -- the root > says .alt doesn't exist, but here you have an answer apparently from > inside the zone -- 'tis an empty / NXD answer, but still looks like > shenanigans are happening... >
If the resolver "has a local zone for alt" -- I think this means it is authoritative for that zone -- why would it ask the root about it at all? A -- Andrew Sullivan a...@anvilwalrusden.com _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
