On Tue, Mar 26, 2019 at 12:48 PM Tony Finch <d...@dotat.at> wrote: > > Dave Lawrence <t...@dd.org> wrote: > > Ray Bellis writes: > > > Serve stael must not become a vector whereby malware can keep its C&C > > > systems artificially alive even if the parent has removed the C&C domain > > > name. > > > > I wholeheartedly agree with this ideal, and am very open to > > considering text improvements. > > I think the suggested max stale timer of 7 days is excessive. The aim is > to cope with an outage, so I think 1 day is much more reasonable (though I > have configured my servers with a 1 hour limit). >
I agree. At least based on my own experience, all the network or other downtime issues I have experienced last only few minutes. If there is a downtime longer than that and it's only affecting DNS, I would seriously consider changing my service providers and vendors, whatever is the issue. _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop
