It appears that Petr � pa� ek <pspa...@isc.org> said: >> That is NXDOMAIN for everything in the zone and NOERROR for the apex >> where (fabricated) SOA and NS records exist. > >BIND does the same, and I think it's fine. It has worked like that since >2012 (in BIND, by default), so if a protocol police comes after me today >I'm going to claim it's barred by the statute of limitations :D > >But more seriously. If Joe wants a name which gets semi-reliable >NXDOMAIN, perhaps go for nonexistent.invalid? At least it says what you >want to do in the name. > >No amount of text will _guarantee_ a specific answer on the wide and >wild Internet, and a new draft is going to have worse adoption rates >than RFC 6761 from 2013.
Now that I think about it some more, I have to agree. The important bit is to keep the queries leaking to the upstream and it does that just fine. R's, John
_______________________________________________ DNSOP mailing list -- dnsop@ietf.org To unsubscribe send an email to dnsop-le...@ietf.org
