Paul Wouters <p...@nohats.ca> wrote: > On Mon, 25 Jun 2018, Tony Finch wrote: > > > That isn't required if the ANAME target records are fetched/updated by an > > out-of-band provisioning process. > > Then you might as well use that mechanism to update A/AAAA records and > skip the intermediate ANAME?
ANAME will add two things beyond a provisioning-only setup: * a standard way to signal to dynamic auth servers where to get A/AAAA records from * a way to signal to recursives that they might get a better answer if they query the target themselves Even for a provisioning-only setup, ANAME will give the zone admin a standard way to configure the provisioning process. That's what I mostly want it for. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ a just distribution of the rewards of success _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop