On Wed, Feb 08, 2017 at 05:02:08PM +1100, Mark Andrews <ma...@isc.org> wrote a message of 30 lines which said:
> > If it has proof of non-existence for .alt cached, it doesn't need > > to ask any further questions to deny the existence of any > > subdomain of .alt. > > Which assumes agggressive negative caching. If by "aggressive negative caching", you mean draft-ietf-dnsop-nsec-aggressiveuse, then I disagree with you: it is *not* necessary (since the name is the same), you just need RFC 8020 support. > I'm going to make a realistic assumption that it will take 10+ years > for there to be meaningful (>50%) deployment of aggressive negative > caching. I would be quite happy to have RFC 8020 in BIND, if you don't mind :-) _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop