[ pruned CC list ]
Ray Bellis <r...@bellis.me.uk> wrote:
> On 17/07/2018 19:43, Shane Kerr wrote:
>
> > Ray Bellis: ANAME shifts work to resolvers; a really bad idea.
>
> correction here - what I actually said was that in the transitional
> phase ANAME shifts work to * authoritatives *.
>From my perspective, it shifts work from manual / static to automated /
dynamic, which is a really good idea :-)
In my setup, with signed zones and traditional secondaries, it isn't
possible for most of my auth servers to actively expand ANAMEs, so the
extra auth work only happens on the primary / signer.
("active" / "passive" ANAME terminology from
https://mailarchive.ietf.org/arch/msg/dnsop/0HM5FkROQ8cBMSa5ZHwdsqGvKoQ)
Tony.
--
f.anthony.n.finch <d...@dotat.at> http://dotat.at/
North Biscay: Variable 3 or 4, becoming northerly or northeasterly 4 or 5.
Slight or moderate. Occasional rain later. Moderate or good.
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
