I should probably let Willem Toorop answer you, but Unbound as shipped by
several Linux distros has the basic ns-revalidation feature turned on by
default ("harden-referral-path"). The open source distribution of Unbound
does not, but Unbound generally does not turn on features by default until
there is a standards track RFC.

Shumon.

On Mon, Mar 17, 2025 at 4:39 PM Ben Schwartz <bemasc=
40meta....@dmarc.ietf.org> wrote:

> I wonder if resolvers are indeed likely to comply with this draft by
> default.
>
> If you support the development of a DNS resolver and are not planning to
> make NS revalidation its default behavior, please reply!
>
> --Ben Schwartz
> ------------------------------
> *From:* Tim Wicinski <tjw.i...@gmail.com>
> *Sent:* Monday, March 17, 2025 4:51 AM
> *To:* dnsop <dnsop@ietf.org>
> *Cc:* dnsop-chairs <dnsop-cha...@ietf.org>
> *Subject:* [DNSOP] Working Group Last Call for
> draft-ietf-dnsop-ns-revalidation "Delegation Revalidation by DNS Resolvers"
>
> All, This starts a Working Group Last Call for
> draft-ietf-dnsop-ns-revalidation "Delegation Revalidation by DNS Resolvers"
> Current version of the draft is available here: https: //datatracker. ietf.
> org/doc/draft-ietf-dnsop-ns-revalidation/
>
> All,
>
>
> This starts a Working Group Last Call for draft-ietf-dnsop-ns-revalidation
> "Delegation Revalidation by DNS Resolvers"
>
> Current version of the draft is available here:
> https://datatracker.ietf.org/doc/draft-ietf-dnsop-ns-revalidation/
> <https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-dnsop-ns-revalidation/__;!!Bt8RZUm9aw!9wT2C7E0NbXSJlXxcSyk94JHdhfxNf7Lee--i780APCPp4TBvfc9ibfkZPATY5Q1F0AdioZYuEq5$>
>
> The Current Intended Status of this document is: Proposed Standard
> Shepherd is: Suzanne Woolf
>
>
> Please review the draft and offer relevant comments.
>
> For WGLC, we need positive support and constructive comments; lack of
> objection is not enough.
> So if you think this draft should be published as an RFC, please say so.
>
> If you feel the document is *not* ready for publication, please speak out
> with your reasons.
>
>
> This starts a two week Working Group Last Call process, and ends on:
>  March 31, 2025
>
> thanks
>
> tim
> for Suzanne/Benno
> _______________________________________________
> DNSOP mailing list -- dnsop@ietf.org
> To unsubscribe send an email to dnsop-le...@ietf.org
>
_______________________________________________
DNSOP mailing list -- dnsop@ietf.org
To unsubscribe send an email to dnsop-le...@ietf.org

Reply via email to