Paul Wouters <p...@nohats.ca> wrote:
> On Mon, 25 Jun 2018, Tony Finch wrote:
>
> > That isn't required if the ANAME target records are fetched/updated by an
> > out-of-band provisioning process.
>
> Then you might as well use that mechanism to update A/AAAA records and
> skip the intermediate ANAME?

ANAME will add two things beyond a provisioning-only setup:

* a standard way to signal to dynamic auth servers where to get A/AAAA
  records from

* a way to signal to recursives that they might get a better answer if
  they query the target themselves

Even for a provisioning-only setup, ANAME will give the zone admin a
standard way to configure the provisioning process. That's what I mostly
want it for.

Tony.
-- 
f.anthony.n.finch  <d...@dotat.at>  http://dotat.at/
a just distribution of the rewards of success

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to