Andrew Sullivan wrote:
On Sun, Nov 12, 2017 at 09:18:31PM +0800, Stephane Bortzmeyer wrote:
This is an upward referral and I tought it was frowned upon since the
ISPrime attack (MUST NOT? SHOULD NOT?)
<https://www.dns-oarc.net/oarc/articles/upward-referrals-considered-harmful>
I tend to agree, but it's certainly something that's around. Should
we note that clients sometimes ignore such references?
they must be ignored, because they could constitute part of a referral
loop. valid referrals are to descendants not ancestors or cousins.
Should we note
that servers often do not return these, though they used to commonly?
we should note that an upward or sideways or other non-downward referral
is a sign of misconfiguration and must be treated as SERVFAIL.
--
P Vixie
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
