the authority server should never fetch anything, and therefore, should not return out-of-zone data. if that means a cname chain ends without a result, that's the resolver's problem. if that means a delegated zone's name servers are only available in a sibling or uncle zone, that's the delegated zone's problem.

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to