On Feb 8, 2017, at 2:42 PM, Mark Andrews <ma...@isc.org> wrote: > 4. Caching DNS servers SHOULD recognize these names as special and > SHOULD NOT, by default, attempt to look up NS records for them, > or otherwise query authoritative DNS servers in an attempt to > resolve these names. Instead, caching DNS servers SHOULD > generate immediate negative responses for all such queries. > > This clause results in BOGUS or SERVFAIL being returned to the DNS > application if there is a validator in the return DNS path between > the caching DNS server and the application.
So, that is the thing to fix.
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
