On Tue, Jul 27, 2021 at 8:32 PM John R Levine <jo...@taugh.com> wrote:
> >> We say that authoritative servers MUST return all the glue, which is > true > >> for real glue, but not true for sibling glue (unless the sibling is in > >> a loop which is not something to encourage.) Let's not confuse people, > please. > > > > Just to make sure we're talking about the same thing, the definition of > > sibling glue is glue from another zone delegated from the same parent. > > That's not what the example in 4.1 of the draft shows. It has foo.test > depending on ns1.bar.test, so the server adds the A record for > ns1.bar.test. > It does actually. foo.test and bar.test share the same parent zone (test). Glue is returned in referrals from the parent zone. So this exactly matches the definition I mentioned above. "ns1.bar.test/A" is glue for "bar.test" (and sibling glue for "foo.test" in that example). It is returned by the servers for "test" in a referral for "foo.test". Open to suggestions for more clarifying language. Shumon.
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop