Tim Wicinski <tjw.i...@gmail.com> writes: > it sounds to me that a discussion on assumptions with EDEs and RCODES > would be useful in the security considerations section as well.
I'll look at wording along those lines. Note, however, that EDE codes are specifically meant as supplemental information and shouldn't be "acted" upon. Hence Paul> A developer writes code that assumes that EDE X must go with RCODE Y Paul> because the text for EDE X indicates that. The get a response with EDE Paul> X and RCODE Z. The code rejects that, and does not act on RCODE Z. "does not act on RCODE Z" is already the right approach, since it's unauthenticated in the first place (which is discussed in the document). > and Wes, it should be "Receivers MUST be" and not "Receives MUST be" in your > last sentence. Yeah, fixed that already (and multiple people have pointed that one out at this point... you folks have good eyes) -- Wes Hardaker USC/ISI _______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop