On Mon, Mar 17, 2025 at 5:23 PM Vladimír Čunát <vladimir.cunat=2Bietf= 40nic...@dmarc.ietf.org> wrote:
> Hello. > On 17/03/2025 10.38, Ben Schwartz wrote: > > If you support the development of a DNS resolver and are not planning to > make NS revalidation its default behavior, please reply! > > I'm still not convinced that this extensive revalidation is worth doing by > default, I'm afraid. > > Consequently, I'm not too happy about a standards-track RFC saying that > (all) resolvers SHOULD do it. > Vladimir, There is language in the draft that tries to address your concern. It allows for "parent centric" (yes, I know many folks don't like that term) to optionally not do it. We also suggest that the "extensive revalidation" (including glue validation), can be done selectively at only a higher layer of the stack (e.g. the root). Shumon.
_______________________________________________ DNSOP mailing list -- dnsop@ietf.org To unsubscribe send an email to dnsop-le...@ietf.org
