On 12/28/18 3:27 PM, John Levine wrote:
I'd think it depends whether invalid delegations bother them, like if, say, ns1.example.com might not be running BIND.
You seem to be conflating the two independent issues at hand:1) Use of RFC 2317's CNAME technique vs the NS technique I'm advocating (be it to the interior or apex of the zone).
2) Use of $GENERATE vs manually creating individual records.#1 is what records to use. #2 is how to create said records. Between them there are four possible combinations.
· Use CNAMEs with manual record creation. · Use CNAMEs with $GENERATE. · Use NS records with manual record creation. · Use NS records with $GENERATE. -- Grant. . . . unix || die
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop