Hi Mark,

Quoting Mark Andrews on Tuesday December 12, 2017:
> 
> HOME.ARPA. SOA        A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2017121101 
> 1800 900 604800 86400
> HOME.ARPA.    NS      A.ROOT-SERVERS.NET.
..
> HOME.ARPA.  DNAME EMPTY.AS112.ARPA.

It is unclear to me how this avoids having root servers process DNAME
records. Given the process of consultation, coordination and testing
support for DNAME records in the root servers (or relocating the .arpa
authorities) is likely to take longer than is desirable to have home.arpa
insecurely delegated, the delegation to AS112 was considered as the best
short-term approach even if it is not without its own difficulties.

kim

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to