In article <5b3e8242.1010...@redbarn.org> you write: >i think you will find that there is no dnssec-compatible way to solve >this problem without upgrades to both authority AND recursive AND stub >dns agents, AND to the getnameinfo-or-similar API. if i'm right, it'll >be necessary to make hard choices, such has, reconsider the constraints.
You're probably right, but I think that ANAME would need as many upgrades, just in slightly different places. Using CNAME has the (perhaps hypothetical) advantage that if we do it, a lot of existing zone files that are now invalid will have become valid with defined semantics. R's, John _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop