Hi Philip,
Dne 01. 12. 21 v 11:46 Philip Homburg napsal(a):
qqq.slackexperts.com. 2370 IN NSEC \000.qqq.slackexperts.com.
RRSIG NSEC
This is returned in response to a AAAA query. The intent was that the NSEC
record should have the 'A' bit as well.
What exactly do Knot and Unbound ignore in this case?
they do not ignore the record when processing the answer.
What they don't is to store this NSEC record in their cache and use it
for crafting other negative responses for subsequent queries without
re-querying the authoritative server.
Libor
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop
