On Wed, Feb 08, 2017 at 05:02:08PM +1100,
 Mark Andrews <ma...@isc.org> wrote 
 a message of 30 lines which said:

> > If it has proof of non-existence for .alt cached, it doesn't need
> > to ask any further questions to deny the existence of any
> > subdomain of .alt.
> 
> Which assumes agggressive negative caching.

If by "aggressive negative caching", you mean
draft-ietf-dnsop-nsec-aggressiveuse, then I disagree with you: it is
*not* necessary (since the name is the same), you just need RFC 8020
support.

> I'm going to make a realistic assumption that it will take 10+ years
> for there to be meaningful (>50%) deployment of aggressive negative
> caching.

I would be quite happy to have RFC 8020 in BIND, if you don't mind :-)

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to