Tim Wicinski <tjw.i...@gmail.com> writes:

> it sounds to me that a discussion on assumptions with EDEs and RCODES
> would be useful in the security considerations section as well. 

I'll look at wording along those lines.

Note, however, that EDE codes are specifically meant as supplemental
information and shouldn't be "acted" upon.  Hence

Paul> A developer writes code that assumes that EDE X must go with RCODE Y
Paul> because the text for EDE X indicates that. The get a response with EDE
Paul> X and RCODE Z. The code rejects that, and does not act on RCODE Z.

"does not act on RCODE Z" is already the right approach, since it's
unauthenticated in the first place (which is discussed in the
document).

> and Wes, it should be "Receivers MUST be" and not "Receives MUST be" in your
> last sentence. 

Yeah, fixed that already (and multiple people have pointed that one out
at this point...  you folks have good eyes)
-- 
Wes Hardaker
USC/ISI

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to