On Feb 3, 2017, at 8:51 PM, Andrew Sullivan <a...@anvilwalrusden.com> wrote: > If the resolver "has a local zone for alt" -- I think this means it is > authoritative for that zone -- why would it ask the root about it at > all?
This is a rehash of the .homenet discussion we had a few weeks ago. As long as the stub resolver isn't validating, it's no problem. If it is validating, then the recursive resolver can't fool the stub resolver if there's a secure denial of existence.
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
