On Wed, Jan 10, 2024 at 4:19 AM Lanlan Pan <abby...@gmail.com> wrote:
> Hi all, > > I have submitted a new draft to discuss the faked answer returned from the > recursive resolver. > > Your comments are appreciated. > > > ---------- Forwarded message --------- > 发件人: <internet-dra...@ietf.org> > Date: 2024年1月10日周三 16:11 > Subject: New Version Notification for > draft-pan-dnsop-explicit-forged-answer-signal-00.txt > To: Lanlan Pan <abby...@gmail.com> > > > A new version of Internet-Draft > draft-pan-dnsop-explicit-forged-answer-signal-00.txt has been successfully > submitted by Lanlan Pan and posted to the > IETF repository. > > Name: draft-pan-dnsop-explicit-forged-answer-signal > Revision: 00 > Title: Explicit Forged Answer Signal > Date: 2024-01-10 > Group: Individual Submission > Pages: 6 > URL: > https://www.ietf.org/archive/id/draft-pan-dnsop-explicit-forged-answer-signal-00.txt > Status: > https://datatracker.ietf.org/doc/draft-pan-dnsop-explicit-forged-answer-signal/ > HTMLized: > https://datatracker.ietf.org/doc/html/draft-pan-dnsop-explicit-forged-answer-signal > > > Abstract: > > This document describes that recursive resolver should give explict > signal in the forged answer. > > Client could react more clearly based on the explict forged answer > signal, to protect user on security and privacy. > > Without commenting on the merits of this, This section: 1. Background and Motivation Recursive server may replace a forged answer to a query with a configured answer of the authoritative server Seems reversed. It should be: 1. Background and Motivation Recursive server may replace a configured answer to a query from the authoritative server with a forged answer -- Bob Harold
_______________________________________________ DNSOP mailing list DNSOP@ietf.org https://www.ietf.org/mailman/listinfo/dnsop