> On Mar 13, 2017, at 15:44, Dave Crocker <d...@dcrocker.net> wrote: > >> On 3/13/2017 4:11 AM, Paul Wouters wrote: >> The draft breaks DNSSEC. > ... >> I have proposed a method that would not change the RPZ response for a >> non-DNSSEC client, but would add data for DNSSEC capable clients to be > > > That sounds like an excellent bit of technical enhancement to consider... > /after/ documenting /existing/ practice.
I would have agreed if the feature didn't break my DNS. Paul _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop