Richard Gibson <rgib...@dyn.com> wrote:

> Because without such a signal, humans using ANY for legitimate diagnostic
> purposes have no means of differentiating section 4.1/4.3 "subset"
> responses from conventional responses where there just happen to be only a
> small number of RRSets at the queried name, encouraging (or at least doing
> nothing to dissuade) a conclusion that the response is in fact conventional
> and complete.

There are several ways to avoid this pitfall:

Use TCP

Look for an NSEC(3) record

Query for the specific types you want to know about

Tony.
-- 
f.anthony.n.finch  <d...@dotat.at>  http://dotat.at/  -  I xn--zr8h punycode
Irish Sea: East 7 to severe gale 9, occasionally storm 10 at first near welsh
coast, veering southeast 5 to 7. Moderate or rough. Mainly fair. Moderate or
good.

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to