On Fri, 18 Aug 2017, Mark Andrews wrote:
Insecure NOERROR NODATA for A and AAAA are fine. Secure NOERROR NODATA for DS is what is needed.
If you believe that's important (I don't) the stubs and caches can special case that, too, of course.
Regards, John Levine, jo...@taugh.com, Taughannock Networks, Trumansburg NY Please consider the environment before reading this e-mail. https://jl.ly _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop