On 25.6.2018 23:12, Mark Andrews wrote: > What is fuzzy? AD (and DO) says set the AD bit if the appropriate rrsets > have all been validated as secure. CD says if you recurse to answer this > query do not validate the answer. There is no you must recurse to answer > this query or you must ignore previous validation results if CD is set. > > The two bits are not mutually exclusive. The two bits do not modify the > behaviour of the other. > > If the conditions for setting AD in the response are met then it should be > set.
I thought so as well but wanted to confirm. Thanks! Petr Špaček @ CZ.NIC _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
